{ config, lib, pkgs, zerotierInterface, ... }: { networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.taskchampion-sync-server.port ]; networking.firewall.interfaces.wg0.allowedUDPPorts = [ config.services.taskchampion-sync-server.port ]; services.taskchampion-sync-server = { enable = true; openFirewall = false; }; }