{
networking.firewall = {
allowedTCPPorts = [ 655 721 ];
allowedUDPPorts = [ 655 721 ];
};
tinc.private.enable = true;
tinc.private.ipv4 = "10.23.42.100";
tinc.secret.enable = true;
tinc.secret.ipv4 = "10.123.42.100";
}