{ ... }: { boot.loader.grub = { enable = true; device = "/dev/vda"; }; networking = { hostName = "forgejo"; firewall = { allowedTCPPorts = [ 80 8443 ]; }; }; system.stateVersion = "23.11"; }