{


  networking.firewall = {
    allowedTCPPorts = [ 655 721 ];
    allowedUDPPorts = [ 655 721 ];
  };

  tinc.private.enable = true;
  tinc.private.ipv4 = "10.23.42.111";

  tinc.secret.enable = true;
  tinc.secret.ipv4 = "10.123.42.123";

}