{...}: {
  networking.firewall = {
    enable = true;
    # Open ports in the firewall.
    #allowedTCPPorts = [ ... ];
    #allowedUDPPorts = [ ... ];
  };
}