dotfiles/systems/jupiter/config/networking.nix

{
  lib,
  flake,
  ...
}:
let
  inherit (flake.config.machines.devices)
    jupiter
    ;
in
{
  networking = {
    hostName = jupiter.name;
    networkmanager.enable = true;
    nftables.enable = true;
    useDHCP = lib.mkDefault true;
    firewall = {
      enable = true;
      allowedTCPPorts = [
        22 # SSH
        4333 # Feishin
        2234 # Soulseek
        3131 # Deskreen
        1234 # Elm-land server
        55473
      ];
    };
  };
  services = {
    avahi = {
      enable = true;
      openFirewall = true;
      nssmdns4 = true;
    };
    sshd.enable = true;
    openssh = {
      enable = true;
      settings.PasswordAuthentication = false;
    };
  };
}