{ ... }:
{
  networking.domain = "home.arpa";
  services.openssh.openFirewall = false;
}