anchor.diff:      thunderbolt
       nix-index
       linuxPackages.evdi
  +    tlp
   
       cron
   
  
positive.code:     libressl
      libyaml
      postgresql
  
      nixfmt
      vim
      ((emacsPackagesNgGen emacs).emacsWithPackages (epkgs: [
        epkgs.vterm
      ]))
      aspell
      aspellDicts.en
      aspellDicts.es
      jq
      fd
      editorconfig-core-c
  
negative.code:       "pinter.lan"
        "pinter.home.lan"
      ];
    };
  
    networking.firewall.checkReversePath = "loose";
    networking.wireguard.enable = true;
  
    networking.firewall.allowedTCPPorts = [
      # 8000
      # 51820
      # 22
      # 80
      # # barrier
      # 24800
      # # docker swarm ports
      # 2377
      # 7946
      # 4789
      # # psql
      # 5432
    ];
  
    # docker swarm ports
    networking.firewall.allowedUDPPorts = [
      # 51820
      # 2377
      # 7946
      # 4789
  