{ pkgs
, lib
, config
, ...
}: {
  environment.systemPackages = [ pkgs.mosh ];
  networking.firewall = lib.mkIf config.networking.firewall.enable {
    allowedUDPPortRanges = [
      { from = 60000; to = 61000; } # mosh
    ];
  };
}