modules/firewall.nix

{
  config.networking.firewall.enable = true;

  config.networking.firewall.allowedTCPPorts = [
    19000  # Expo
    1935   # RTMP
  ];
}