{
  networking.firewall.allowedTCPPorts = [ 6443 80 443 10000 33073 ];
  networking.firewall.allowedUDPPorts = [ 3478 ];
  networking.firewall.allowedUDPPortRanges = [
    { from = 49152; to = 65535; }
  ];

  services.k3s = {
    enable = true;
    role = "server";
    manifests = {
      traefik-namespace    = { source = ./traefik/namespace.yaml; };
      traefik-rbac         = { source = ./traefik/rbac.yaml; };
      traefik-pvc          = { source = ./traefik/pvc.yaml; };
      traefik-deployment   = { source = ./traefik/deployment.yaml; };
      traefik-service      = { source = ./traefik/service.yaml; };
      netbird-namespace    = { source = ./netbird/namespace.yaml; };
      netbird-secrets      = { source = ./netbird/secrets.yaml; };
      netbird-coturn       = { source = ./netbird/coturn.yaml; };
      netbird-signal       = { source = ./netbird/signal.yaml; };
      netbird-management   = { source = ./netbird/management.yaml; };
      netbird-relay        = { source = ./netbird/relay.yaml; };
      netbird-ingress      = { source = ./netbird/ingress.yaml; };
    };
  };
}