nix/nixos/common/services/opensnitch.nix

{lib, pkgs, desktop, ... }: {
    # Install the UI if we are using a desktop
    environment.systemPackages = [ ]  ++ lib.optional (builtins.isString desktop) pkgs.opensnitch-ui;

    services.opensnitch = {
        enable = true;
        # https://github.com/evilsocket/opensnitch/wiki/Rules
        # https://search.nixos.org/options?channel=23.11&show=services.opensnitch.rules&from=0&size=50&sort=relevance&type=packages&query=opensnitch 
    };
}