{ ... }: {
  networking.firewall = {
    allowedTCPPorts = [];
    allowedUDPPorts = [];
  };
}