{...} : 
{
  networking.firewall.allowedTCPPorts = [ 42420 25565 2049 ]; # 2049 - nfs, 25565 - generic
  networking.firewall.allowedUDPPorts = [ 5900 ]; # 5900 - vnc
  networking.firewall.trustedInterfaces = [ "enp12s0" "wlp11s0"];
  # WoL
  networking.interfaces.enp12s0.wakeOnLan.enable = true;
  networking.interfaces.enp12s0.wakeOnLan.policy = [ "magic" ];
  # throne
  programs.throne.enable = true;
  programs.throne.tunMode.enable = true;
}