{ ... }:
{
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
  };

  networking = {
    hostName = "unifi-controller";
    firewall = {
      allowedTCPPorts = [ 53 8080 8443 8880 8843 6789 27117 ];
      allowedUDPPorts = [ 53 3478 5514 10001 1900 123 ];
      allowedUDPPortRanges = [
        {
          from = 5656;
          to = 5699;
        }
      ];
    };
  };

  system.stateVersion = "23.11";
}