# This replaces `iptables` for the firewall
  networking.nftables.enable = true;