nixos/firewall: Support extraStopCommands
nixos/nat: Leverage firewall module
Merge pull request #4111 from wkennington/master.nat

Allow nat to leverage the firewall unit if available