1  { pkgs, ... }:
2  {
3    # Use nftables instead of iptables (modern firewall)
4    networking.nftables.enable = true;
5  
6    # Keep iptables command for muscle memory / compatibility
7    environment.systemPackages = [ pkgs.iptables ];
8  }