{
  networking.firewall = {
    allowedUDPPorts = [137 138];
    allowedTCPPorts = [139 445];
  };

  virtualisation.arion = {
    projects.nas.settings = {
      imports = [./arion-compose.nix];
    };
  };
}