nix/hosts/marvin/firewall.nix

{
  networking.firewall.allowedTCPPorts = [80 443 6912];
  networking.firewall.trustedInterfaces = [ "tailscale0" ];
}