eve-psr-nix0/nix/system/network.nix

{ ... }: {
  networking = {
    hostName = "eve-psr-nix0";
    firewall = {
      allowedTCPPorts = [ 22 80 443 23231 23232 23233 ];
      allowedUDPPorts = [ 53 51820 ];
      trustedInterfaces = [ "tun0" ];
    };
    nat = {
      enable = true;
      externalInterface = "enp1s0";
      internalInterfaces = [ "tun0" "wg0" ];
    };
  };
}