{
  services = {
    caddy.enable = true;
    tor.enable = true;
  };

  networking.firewall.allowedTCPPorts = [80 443];
}