{ pkgs, ... }: { networking.firewall = { enable = true; allowedUDPPorts = [ 3224 ]; allowedTCPPorts = [ ]; }; }