From b5d767cceed9518fe0d4cfb915fb9ec8b37210e5 Mon Sep 17 00:00:00 2001
From: Evan Reichard <evan@reichard.io>
Date: Tue, 8 Apr 2025 10:03:24 -0400
Subject: [PATCH] fix - rke2 metallb open

---
 .../evanreichard@mac-va-mbp-personal/default.nix          | 8 +-------
 modules/nixos/services/rke2/default.nix                   | 6 ++++++
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/homes/aarch64-darwin/evanreichard@mac-va-mbp-personal/default.nix b/homes/aarch64-darwin/evanreichard@mac-va-mbp-personal/default.nix
index 1e5968b..496a366 100755
--- a/homes/aarch64-darwin/evanreichard@mac-va-mbp-personal/default.nix
+++ b/homes/aarch64-darwin/evanreichard@mac-va-mbp-personal/default.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, config, namespace, ... }:
+{ lib, config, namespace, ... }:
 let
   inherit (lib.${namespace}) enabled;
 in
@@ -12,7 +12,6 @@ in
     };
 
     services = {
-      ssh-agent = enabled;
       # TODO
       # sops = {
       #   enable = true;
@@ -25,11 +24,6 @@ in
       graphical = {
         ghostty = enabled;
         ghidra = enabled;
-        browsers.firefox = {
-          enable = true;
-          gpuAcceleration = true;
-          hardwareDecoding = true;
-        };
       };
 
       terminal = {
diff --git a/modules/nixos/services/rke2/default.nix b/modules/nixos/services/rke2/default.nix
index 103f72f..f288218 100644
--- a/modules/nixos/services/rke2/default.nix
+++ b/modules/nixos/services/rke2/default.nix
@@ -27,6 +27,9 @@ in
       2381 # etcd Metrics Port
       10250 # kubelet metrics
       9099 # Canal CNI health checks
+
+      # MetalLB
+      7946 # memberlist
     ];
 
     networking.firewall.allowedUDPPorts = mkIf cfg.openFirewall [
@@ -34,6 +37,9 @@ in
       8472 # Canal CNI with VXLAN
       # 51820 # Canal CNI with WireGuard IPv4 (if using encryption)
       # 51821 # Canal CNI with WireGuard IPv6 (if using encryption)
+
+      # MetalLB
+      7946 # memberlist
     ];
   };
 }