Add firewall config

flake.nix

@@ -7,7 +7,8 @@
   };
 
   outputs = { self, nixpkgs, flake-utils }:
-    flake-utils.lib.eachSystem [ "x86_64-linux" ] (system:
+    flake-utils.lib.eachSystem [ "x86_64-linux" ]
+      (system:
         let
           pkgs = nixpkgs.legacyPackages.${system};
           lib = nixpkgs.lib;
@@ -119,6 +120,20 @@
               capabilities = "cap_sys_admin+p";
               source = "${sunshine}/bin/sunshine";
             };
+
+            networking.firewall = mkIf cfg.openFirewall {
+              allowedTCPPorts = [
+                48010
+              ];
+
+              allowedTCPPortRanges = [
+                { from = 47984; to = 47990; }
+              ];
+
+              allowedUDPPortRanges = [
+                { from = 47998; to = 48000; }
+              ];
+            };
           };
         };
     };