{...}:
{
  services.ipfs.enable = true;
  networking.firewall.allowedTCPPorts = [ 4001 ];
}