{pkgs, ...}: {
  networking.firewall.allowedTCPPorts = [
    80
    22
    443
    8009
    222 #ubuntu vm

    3000 #forgejo
    2200 #forgejo
  ];
}