refactor

modules/capabilities/yookr-dev.nix

@@ -3,8 +3,13 @@
     { config, ... }:
     {
       security.pki.certificateFiles = [
-        ../hosts/zenith/mkcert-rootCA.pem
-        ../hosts/polaris/mkcert-rootCA.pem
+        ./yookr-dev/zenith-rootCA.pem
+        ./yookr-dev/polaris-rootCA.pem
+      ];
+
+      networking.firewall.allowedTCPPorts = [
+        5173
+        5174
       ];
 
       networking.extraHosts = ''