{ config, pkgs, ... }: { networking.firewall = { enable = true; allowedTCPPorts = [ 80 443 1004 666 ]; allowedUDPPorts = [ 80 443 1004 666 ]; }; }