{
  networking.firewall.allowedTCPPorts = [80 443];
}