{ ... }: { networking = { firewall.enable = false; nftables = { enable = true; rulesetFile = ./ruleset.nft; }; }; }