{...}: let
in {
  networking.firewall = {
    enable = true; # disable default firewall
    allowedTCPPorts = [22 80 443 25565];
    allowedUDPPorts = [22 80 443 25565];
  };
}