{ ... }:
{
  networking = {
    networkmanager.enable = true;
    nameservers = [ "1.1.1.1" "1.0.0.1" ];
    firewall = {
      enable = true;
      checkReversePath = false;
      allowedTCPPorts = [ 80 443 ];
      allowedUDPPorts = [];
    };
  };
}