{ pkgs, ... }: { networking.firewall = { enable = true; allowedUDPPorts = [ ]; allowedTCPPorts = [ ]; }; }