update firewall stuff

modules/nixos/networking/firewall.nix

···
       enable = true;
       package = pkgs.iptables;
 
-      allowedTCPPorts = [
-        443
-        80
-      ];
+      allowedTCPPorts = [ ];
       allowedUDPPorts = [ ];
 
       allowedTCPPortRanges = [ ];

modules/nixos/services/caddy.nix

···
       group = "caddy";
     };
 
-    networking = { inherit (cfg) domain; };
+    networking = {
+      inherit (cfg) domain;
+
+      firewall.allowedTCPPorts = [
+        80
+        443
+      ];
+    };
 
     security.acme = {
       acceptTerms = true;