nixos-config/nix/verify/module.nix

{ lib, ... }:
with lib;
with types;
{
  options.verify.closed = mkOption {
    default = { };
    type = attrsOf (submodule {
      options = {
        domain = mkOption {
          type = str;
          description = ''
            domain to scan
          '';
        };
        # todo: make this an attrs so I know why port xyz should be closed.
        ports = mkOption {
          type = listOf int;
          description = ''
            ports that should be closed
          '';
        };
      };
    });
  };
}