{ pkgs, ... }: {

  networking.firewall = {
    enable = false;
    allowedTCPPorts = [
      25565
      22
      222
      4827
      2222
      9001
      1141
      # matrix 
      8008
    ];
    allowedUDPPorts = [
      25565
      22
      222
      2222
      4827
      1141
      5121 # olama
      9001

      # matrix
      8008
    ];
  };

}