fix(services): disable opening ports on many services

i think proxy passing using nginx makes more sense
i shouldn't be able to just type in the port

Author: suasuasuasuasua

modules/nixos/services/actual.nix

@@ -24,7 +24,6 @@ in
     # TODO: need to setup HTTPS to continue using...
     services.actual = {
       enable = true;
-      openFirewall = true;
       settings = {
         inherit (cfg) port;
       };

modules/nixos/services/adguardhome/default.nix

@@ -29,9 +29,6 @@ in
       inherit settings;
 
       enable = true;
-      # https://search.nixos.org/options?channel=24.11&show=services.adguardhome.openFirewall&from=0&size=50&sort=relevance&type=packages&query=adguard
-      # opens the web port, not the dns port!
-      openFirewall = true;
     };
 
     services.nginx.virtualHosts = {

modules/nixos/services/audiobookshelf.nix

@@ -22,7 +22,6 @@ in
 
       enable = true;
       host = "127.0.0.1";
-      openFirewall = true;
     };
 
     services.nginx.virtualHosts = {

modules/nixos/services/calibre.nix

@@ -36,7 +36,6 @@ in
         inherit (cfg) libraries;
 
         enable = true;
-        openFirewall = true;
       };
 
       calibre-web = {
@@ -46,7 +45,6 @@ in
 
           ip = "127.0.0.1";
         };
-        openFirewall = true;
 
         options = {
           # NOTE: kinda ugly but you can only access one library

modules/nixos/services/code-server.nix

@@ -46,7 +46,5 @@ in
         };
       };
     };
-
-    networking.firewall.allowedTCPPorts = [ cfg.port ];
   };
 }

modules/nixos/services/glances.nix

@@ -21,7 +21,6 @@ in
       inherit (cfg) port;
 
       enable = true;
-      openFirewall = true;
       extraArgs = [
         "--webserver"
       ];

modules/nixos/services/immich.nix

@@ -25,7 +25,6 @@ in
       inherit (cfg) port mediaLocation;
 
       enable = true;
-      openFirewall = true;
       machine-learning.enable = true;
       settings = { };
     };

modules/nixos/services/jellyfin.nix

@@ -19,7 +19,6 @@ in
   config = lib.mkIf cfg.enable {
     services.jellyfin = {
       enable = true;
-      openFirewall = true;
     };
 
     services.nginx.virtualHosts = {

modules/nixos/services/jellyseerr.nix

@@ -21,7 +21,6 @@ in
       inherit (cfg) port;
 
       enable = true;
-      openFirewall = true;
     };
 
     services.nginx.virtualHosts = {

modules/nixos/services/mealie.nix

@@ -17,11 +17,6 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    # no option to open firewall so do it manually!
-    networking.firewall.allowedTCPPorts = [
-      cfg.port
-    ];
-
     services.mealie = {
       inherit (cfg) port;