attempt fixes

nixos/arion/arion-compose.nix

@@ -44,7 +44,7 @@
     service.command = [ config.nixos.build.run-nginx ];
     service.useHostStore = true;
     service.ports = [
-      "8000:80" # host:container
+      "8009:80" # host:container
     ];
   };
 }

nixos/firewall.nix

@@ -1,3 +1,3 @@
 {pkgs, ...}: {
-  networking.firewall.allowedTCPPorts = [80 22 443];
+  networking.firewall.allowedTCPPorts = [80 22 443 8009];
 }

nixos/linux.nix

@@ -43,6 +43,17 @@ in {
   age.secrets.nearlyfreespeech.file = ./secrets/nearlyfreespeech.age;
   age.secrets.nearlyfreespeech.owner = "root";
 
+  writeShellScriptBinInRepoRoot = name: script: pkgs.writeShellScriptBin name ''
+    cd `${pkgs.git}/bin/git rev-parse --show-toplevel`
+    ${script}
+  '';
+
+  start-arion-run = writeShellScriptBinInRepoRoot "start-arion-run" ''
+    cd arion/
+    ${pkgs.arion}/bin/arion down
+    ${pkgs.arion}/bin/arion up
+  '';
+
   environment.systemPackages = [
     ddnsPkg
     pullomaticPkg
@@ -56,6 +67,7 @@ in {
 
     # For docker-compose like setups
     pkgs.arion
+    start-arion-run
   ];
 
   swapDevices = [