{ ... }: { networking.domain = "net.clerie.de"; networking.firewall.logRefusedConnections = lib.mkDefault false; }