From f2382f6270d271ca997b5ddc9ce16beb69afd0aa Mon Sep 17 00:00:00 2001
From: Christoph Urlacher <christoph.urlacher@protonmail.com>
Date: Thu, 2 Jul 2026 16:50:26 +0200
Subject: [PATCH] System/Thinknix: Enable arcane service

---
 system/thinknix/default.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/system/thinknix/default.nix b/system/thinknix/default.nix
index 3214ca1..366056e 100644
--- a/system/thinknix/default.nix
+++ b/system/thinknix/default.nix
@@ -16,6 +16,7 @@
 
     # General services
     ../services/adguard.nix
+    ../services/arcane.nix
     ../services/nginx-proxy-manager.nix
     # ../services/portainer.nix
     # ../services/pulse.nix
@@ -59,15 +60,20 @@
       allowedTCPPorts = [
         53 # DNS
         80 # HTTP
+
+        3553 # Arcane
       ];
       allowedUDPPorts = [
         53 # DNS
         67 # DHCP
+
+        3553 # Arcane
       ];
     };
 
     sops-nix.secrets.${username} = [
-      # "wireguard-vps-private-key"
+      "arcane-encryption-key"
+      "arcane-jwt-secret"
     ];
   };