From 590cc1b216abfef47f3231b000ef04b207964ee4 Mon Sep 17 00:00:00 2001
From: randogoth <kflux@posteo.de>
Date: Fri, 27 Mar 2026 17:13:01 +0300
Subject: [PATCH] Add ORPort 4431 required for bridge relay; open port in
 firewall

Tor requires ORPort to be set when BridgeRelay=1.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 modules/services/firewall.nix   | 2 +-
 modules/services/tor-bridge.nix | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/services/firewall.nix b/modules/services/firewall.nix
index b3e16e2..39a069e 100644
--- a/modules/services/firewall.nix
+++ b/modules/services/firewall.nix
@@ -1,5 +1,5 @@
 { ... }:
 {
   networking.firewall.enable = true;
-  networking.firewall.allowedTCPPorts = [ 22 80 443 4430 8443 ];
+  networking.firewall.allowedTCPPorts = [ 22 80 443 4430 4431 8443 ];
 }
diff --git a/modules/services/tor-bridge.nix b/modules/services/tor-bridge.nix
index 828a8b5..617cd9d 100644
--- a/modules/services/tor-bridge.nix
+++ b/modules/services/tor-bridge.nix
@@ -6,6 +6,7 @@
       role = "bridge";
     };
     settings = {
+      ORPort = 4431;
       ServerTransportListenAddr = "obfs4 0.0.0.0:4430";
       BridgeDistribution = "none";
     };