nixos-config/linux/singularity/network.nix

{config, ...}: {
  networking = {
    firewall = with config.constants.port; {
      allowedTCPPorts = [coturn coturn-tls http https];
      allowedUDPPorts = [coturn coturn-tls];
      allowedUDPPortRanges = [
        {
          from = coturn-relay-udp-min;
          to = coturn-relay-udp-max;
        }
      ];
    };
    hostId = "2cadb253";
    nftables.enable = true;
  };

  services = {
    cloudflare-dyndns = {
      enable = true;
      apiTokenFile = config.sops.secrets.cloudflare.path;
      domains = builtins.attrNames config.services.caddy.virtualHosts;
    };
    openssh.enable = true;
  };

  sops.secrets.cloudflare = {};
}