{ ... }: {
  networking = {
    hostName = "eve-psr-nix0";
    firewall = {
      allowedTCPPorts = [ 22 80 443 3000 7860 9418 23231 23232 23233 ];
      allowedUDPPorts = [ 53 1194 ];
      trustedInterfaces = [ "tun0" ];
    };
    nat = {
      enable = true;
      externalInterface = "enp1s0";
      internalInterfaces = [ "tun0" ];
    };
  };
}