{
  networking.firewall = {
    enable = true;
    allowedTCPPorts = [
      22
      53
      80
      443
      784
      853
      3001
      3015
      4438
      5443
      8088
      10380
    ];
    allowedUDPPorts = [
      53
      443
      784
      9993
      5443
    ];
  };
}