add ports allowed past firewall

default.nix

@@ -256,16 +256,6 @@ in
     # Enable NFS client support
     services.rpcbind.enable = true;
     
-    # Clean up old automount unit during activation
-    system.activationScripts.cleanupOldNfsAutomount = ''
-      if systemctl is-active mnt-nfs_share.automount &>/dev/null; then
-        systemctl stop mnt-nfs_share.automount || true
-      fi
-      if systemctl is-active mnt-nfs_share.mount &>/dev/null; then
-        systemctl stop mnt-nfs_share.mount || true
-      fi
-    '';
-    
     # NFS mount for shared storage
     fileSystems."/mnt/nfs_share" = {
       device = "192.168.1.249:/mnt/nfs_share";
@@ -365,6 +355,10 @@ in
         80        # HTTP
         443       # HTTPS
         3000      # Main web app (if exposed directly)
+        3001      # Vision video remote web app
+        3002      # Vision system remote web app
+        3003      # Scheduling remote web app
+        4000      # Analytics service web app
         
         # Supabase services
         54321     # Supabase Kong (API Gateway)
@@ -375,6 +369,7 @@ in
         
         # USDA Vision services
         8000      # Camera Management API
+        8025      # Mailpit (email testing)
         8090      # Media API
         8189      # MediaMTX API
         8554      # RTSP (MediaMTX)