_: {
  networking.firewall.allowedTCPPorts = [
    443
    80
  ];
}