nixos/firewall: Cleanup in case reload fails
Merge pull request #4114 from wkennington/master.firewall

nixos/firewall: Cleanup in case reload fails