From ee718563c80ee52eb36b2eebe21677f03814a702 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sat, 25 Jul 2026 07:35:42 +0900
Subject: [PATCH] bicep/postgresql: don't open udp 5432 in firewall

---
 hosts/bicep/services/postgresql/default.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/hosts/bicep/services/postgresql/default.nix b/hosts/bicep/services/postgresql/default.nix
index bdb4174..769535c 100644
--- a/hosts/bicep/services/postgresql/default.nix
+++ b/hosts/bicep/services/postgresql/default.nix
@@ -150,7 +150,6 @@ in
   };
 
   networking.firewall.allowedTCPPorts = lib.mkIf cfg.enable [ 5432 ];
-  networking.firewall.allowedUDPPorts = lib.mkIf cfg.enable [ 5432 ];
 
   environment.systemPackages = [
     (pkgs.writeShellApplication {