{ config, lib, ... }:
{
  security.polkit.enable = true;
  security.rtkit.enable = true;
  networking.firewall = {
    enable = true;
    allowedTCPPorts = lib.optionals (config.bchmnn.collections.development.enable) [
      3000
      6969
      8080
    ];
  };
}