hosts/common/default.nix

@@ -27,7 +27,7 @@
   };
 
   networking = {
-    firewall.enable = true;
+    firewall.enable = false;
     networkmanager = {
       enable = true;
       wifi.macAddress = "random";
@@ -84,6 +84,7 @@
         };
       }];
     };
+    localsend.openFirewall = true;
   };
 
   services = {

modules/options/networking/default.nix

@@ -2,7 +2,7 @@
 
 {
   imports = [
-    ./localsend.nix
+    ./firewall-rules/localsend.nix
     ./networkmanager/auto-wlan.nix
     ./networkmanager/systemd-wait-online.nix
   ];

modules/options/networking/firewall-rules/localsend.nix

@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+
+{
+  config = lib.mkIf config.programs.localsend.openFirewall {
+    networking.firewall = {
+      allowedTCPPorts = [ 53317 ];
+      allowedUDPPorts = [ 53317 ];
+    };
+  };
+
+  options.programs.localsend.openFirewall = lib.mkEnableOption "open the default ports for localsend";
+}

modules/options/networking/localsend.nix

@@ -1,8 +0,0 @@
-{ ... }:
-
-{
-  networking.firewall = {
-    allowedTCPPorts = [ 53317 ];
-    allowedUDPPorts = [ 53317 ];
-  };
-}