{ config, ... }:
let
  nixosModules = config.flake.modules.nixos;
in
{
  flake.modules.nixos.nftables-firewall = {
    networking.nftables.enable = true;
  };

  flake.modules.nixos.network-manager = {
    networking = {
      networkmanager.enable = true;
      firewall.allowedTCPPorts = [
        5173
        5174
      ];
    };
  };

  flake.modules.nixos.server-firewall =
    { ... }:
    {
      imports = [
        nixosModules.nftables-firewall
      ];

      networking.firewall.allowPing = false;
    };
}