hosts/common/default.nix

@@ -27,7 +27,7 @@
   };
 
   networking = {
-    firewall.enable = false;
+    firewall.enable = true;
     networkmanager = {
       enable = true;
       wifi.macAddress = "random";
@@ -84,7 +84,6 @@
         };
       }];
     };
-    localsend.openFirewall = true;
   };
 
   services = {

modules/options/networking/default.nix

@@ -2,7 +2,7 @@
 
 {
   imports = [
-    ./firewall-rules/localsend.nix
+    ./localsend.nix
     ./networkmanager/auto-wlan.nix
     ./networkmanager/systemd-wait-online.nix
   ];

modules/options/networking/firewall-rules/localsend.nix

@@ -1,12 +0,0 @@
-{ config, lib, ... }:
-
-{
-  config = lib.mkIf config.programs.localsend.openFirewall {
-    networking.firewall = {
-      allowedTCPPorts = [ 53317 ];
-      allowedUDPPorts = [ 53317 ];
-    };
-  };
-
-  options.programs.localsend.openFirewall = lib.mkEnableOption "open the default ports for localsend";
-}

modules/options/networking/localsend.nix

@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  networking.firewall = {
+    allowedTCPPorts = [ 53317 ];
+    allowedUDPPorts = [ 53317 ];
+  };
+}