{ config, ... }:
let
  nixosModules = config.flake.modules.nixos;
in
{
  flake.modules.nixos.nftables-firewall = {
    networking.nftables.enable = true;
  };

  flake.modules.nixos.network-manager = {
    networking.networkmanager.enable = true;
  };

  flake.modules.nixos.server-firewall =
    { ... }:
    {
      imports = [
        nixosModules.nftables-firewall
      ];

      networking.firewall.allowPing = false;
    };
}