{ ... }: {
  networking = {
    firewall = {
      enable = true;
      # NOTE:  THis is required to be non-port specific because of the Docker network.
      # Else the connection fails.  I don't know how / if I can specify the Docker bridge interface
      allowedTCPPorts = [
        53    # DNS
        80    # HTTP
        443   # HTTPS
        5696  # DSM-KMIP
        5697  # DSM-KMIP Backup
        8096  # Jellyfin
      ];
     interfaces = {
        tailscale0 = { 
          allowedTCPPorts = [
            53   # DNS
            80    # HTTP
            443   # HTTPS
          ];
        };
      };
    };
  };
}