liminalOS/modules/linux/networking/default.nix

let
  universalAllowedPorts = [
    27016 # grim dawn
    42805 # grim dawn
    5173 # vite test server
    4173 # vite test server
  ];
  universalAllowedRanges = [
    {
      from = 42852;
      to = 42872;
    }
  ];
in
{
  services.openssh.enable = true;
  networking.firewall = {
    allowedTCPPorts = universalAllowedPorts;
    allowedUDPPorts = universalAllowedPorts;
    allowedUDPPortRanges = universalAllowedRanges;
    allowedTCPPortRanges = universalAllowedRanges;
  };
  networking.firewall.enable = true;
  networking.nameservers = [
    "1.1.1.1"
    "1.0.0.1"
  ];
}