reNixos/s0mev1rtn0de-nix/networking/firewall.nix

{...}: {
  networking = {
    firewall = {
      enable = true;
      allowPing = true;
      checkReversePath = false;
    };

    useNetworkd = true;
  };
}