nixos nat: add description to forwardPorts