{
  config,
  lib,
  pkgs,
  ...
}:

{
  imports = [ ];

  options.me = {
    cilium.enable = lib.mkOption {
      type = lib.types.bool;
      default = false;
      example = true;
      description = "Whether we want to install cilium.";
    };
  };

  config = lib.mkIf config.me.cilium.enable {
    networking.firewall.allowedTCPPorts = [
      4240 # Health checks
    ];
    networking.firewall.allowedUDPPorts = [
      8472 # vxlan
      51871 # wireguard
    ];
  };
}