secure munin-node with firewall

nixos/ninurta/configuration.nix

@@ -367,15 +367,21 @@ in
       22 # SSH
       80 # munin web
       631 # Printing
-      3000 # Hydra
-      softServePort
     ];
     allowedUDPPorts = [
       631 # Printing
       51234 # Wireguard
       51235 # Wireguard
     ];
-    logReversePathDrops = true;
+    interfaces = {
+      uwu.allowedTCPPorts = [
+        softServePort
+      ];
+      wg0.allowedTCPPorts = [
+        3000 # Hydra
+        4949 # munin-node
+      ];
+    };
   };
 
   services.resolved.enable = true;

nixos/surgat/configuration.nix

@@ -123,12 +123,14 @@ in
       22 # SSH
       80
       443 # HTTPS
-      4949 # munin-node
     ];
     allowedUDPPorts = [
       51234 # Wireguard
       51235 # Wireguard
     ];
+    interfaces.ninurta.allowedTCPPorts = [
+      4949 # munin-node
+    ];
   };
 
   # Use the GRUB 2 boot loader.