eve-psr-nix0/nix/system/network.nix

{ ... }: {
  networking = {
    hostName = "eve-psr-nix0";
    firewall = {
      allowedTCPPorts = [ 22 80 443 7860 23231 23232 23233 9418 3000 ];
      allowedUDPPorts = [ 53 1194 ];
      trustedInterfaces = [ "tun0" ];
    };
    nat = {
      enable = true;
      externalInterface = "enp1s0";
      internalInterfaces = [ "tun0" ];
    };
  };
}