{pkgs, ...}: {
  networking.firewall.allowedTCPPorts = [80 22 443 8009];
}