From 3e8895a3ff5b53487844c14cbf404417daee555a Mon Sep 17 00:00:00 2001
From: Dave Gallant <dave.gallant@gmail.com>
Date: Sun, 9 Feb 2025 15:55:10 -0500
Subject: [PATCH] Add freefilesync

---
 machines/hephaestus/configuration.nix | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/machines/hephaestus/configuration.nix b/machines/hephaestus/configuration.nix
index 66ef016..b50ed92 100644
--- a/machines/hephaestus/configuration.nix
+++ b/machines/hephaestus/configuration.nix
@@ -95,6 +95,7 @@ in
       discord
       docker
       docker-compose
+      freefilesync
       ghostscript
       gimp-with-plugins
       glibcLocales
@@ -298,6 +299,29 @@ in
   services.opensnitch = {
     enable = true;
     rules = {
+      avahi-ipv4 = {
+        name = "Allow avahi daemon IPv4";
+        enabled = true;
+        action = "allow";
+        duration = "always";
+        operator = {
+          type = "list";
+          operand = "list";
+          list = [
+            {
+              type = "simple";
+              operand = "process.path";
+              sensitive = false;
+              data = "${lib.getBin pkgs.avahi}/bin/avahi-daemon";
+            }
+            {
+              type = "network";
+              operand = "dest.network";
+              data = "224.0.0.0/24";
+            }
+          ];
+        };
+      };
       systemd-timesyncd = {
         name = "systemd-timesyncd";
         enabled = true;