{ pkgs, ... }: { networking.firewall = { #extraCommands = "iptables -I FORWARD default"; allowedUDPPorts = [ 34197 #factorio ]; }; }