fix firewall config

configuration.nix

@@ -157,17 +157,8 @@
 
   # wireguard settings
   networking.firewall = {
-    # if packets are still dropped, they will show up in dmesg
+    allowedUDPPorts = [ 51820 ];
-    logReversePathDrops = true;
+    enable = true;
-    # wireguard trips rpfilter up
-    extraCommands = ''
-      ip46tables -t raw -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
-      ip46tables -t raw -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
-    '';
-    extraStopCommands = ''
-      ip46tables -t raw -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
-      ip46tables -t raw -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
-    '';
   };
 
   # This value determines the NixOS release from which the default

user.nix

@@ -35,6 +35,7 @@
       mpv
       yt-dlp
       obs-studio
+      ffmpeg
 
       # images
       feh