1{...}: { 2 networking.firewall = { 3 enable = true; 4 allowedTCPPorts = [ 5 22 # ssh 6 80 7 443 # http[s] 8 ]; 9 }; 10}