flake/services/ipfs.nix

{
  services = {
    kubo.enable = true;

    tor.relay.onionServices."site".map = [
      4001
      8080
    ];
  };

  networking.firewall.allowedTCPPorts = [4001];
}