{pkgs, ...}: {
  networking.firewall.allowedTCPPorts = [
    80
    22
    443
    8009
    222 #ubuntu vm

    9090 #sync.io

    3000 #forgejo
    2200 #forgejo

    8082 #webdav
  ];
}