NixOS-Config/system/desktop/firewall.nix

{outputs, ...}: {
  # Networking settings
  networking = {
    # Enable firewall
    firewall = {
      allowPing = false;
      extraInputRules = ''
        ip saddr { ${outputs.ips.server}, ${outputs.ips.wgSpan}.1 } accept comment "Accept Server"
      '';
    };
  };
}