nix/nixos/common/services/opensnitch.nix

{lib, pkgs, desktop, ... }: {
    # Install the UI if we are using a desktop
    environment.systemPackages = [ ]  ++ lib.optional (builtins.isString desktop) pkgs.opensnitch-ui;

    services.opensnitch = {
        enable = true;
    };
}