nixos/nat: Leverage firewall module