{ config, pkgs, ...}: { networking.nat = { enable = true; extraCommands = "iptables -A INPUT -p icmp -j ACCEPT"; externalInterface = "ens18"; internalInterfaces = [ "ens19" ]; }; }