{ config, lib, pkgs, ... }:

{
  services.opensnitch = {
    enable = true;
    settings = {
      DefaultAction = "allow";
      LogLevel = 2;
      Stats.MaxEvents = 3;
    };
  };

  environment.systemPackages = [
    pkgs.opensnitch-ui
  ];
}