modules/firewall.nix

{
  config.networking.firewall.enable = true;

  config.networking.firewall.allowedTCPPorts = [
    19000 # Expo
    1935 # RTMP
  ];
}