reNixos/s0mev1rtn0de-nix/networking/firewall.nix

{...}: {
    networking = {
        firewall = {
            enable = true;
            allowPing = true;
            checkReversePath = false;
        };

        useNetworkd = true;
    };
}