From 796a0003c746c23b4cd56adde58557c9c727383f Mon Sep 17 00:00:00 2001
From: Timothy Kim <timothykim@fastmail.fm>
Date: Mon, 16 Mar 2026 01:09:09 -0400
Subject: [PATCH] open firewall ports for HTTP/HTTPS in setup.sh

---
 setup.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/setup.sh b/setup.sh
index e0bc873..1dd2542 100755
--- a/setup.sh
+++ b/setup.sh
@@ -105,6 +105,11 @@ chmod 440 /etc/sudoers.d/deploy
 echo "==> Making scripts executable..."
 chmod +x "$REPO_DIR/scripts/"*.sh
 
+echo "==> Opening firewall ports..."
+firewall-cmd --permanent --add-service=http
+firewall-cmd --permanent --add-service=https
+firewall-cmd --reload
+
 echo "==> Setting up certbot..."
 mkdir -p "$REPO_DIR/docker/nginx/certbot/www"
 mkdir -p /etc/letsencrypt/renewal-hooks/deploy