{ pkgs, lib, ... }:
{
  networking.firewall.package = pkgs.iptables-nftables-compat;
  environment.systemPackages = [ pkgs.nftables ];
}