{
  flake.modules.nixos.server-firewall = {
    networking = {
      firewall.enable = true;
      firewall.allowPing = false;
      nftables.enable = true;
    };
  };

  flake.modules.nixos.networking = {
    networking = {
      nftables.enable = true;
      networkmanager.enable = true;
    };
  };
}