bucur/modules/services/firewall.nix

{ ... }:
{
  networking.firewall.enable = true;
  networking.firewall.allowedTCPPorts = [
    22
    80
    443
    2222
    4430
    4431
    8443
  ];
}