nixos: separate openssh firewall port

nixos/common.nix

@@ -92,13 +92,7 @@ in
   networking = {
     networkmanager.enable = true;
 
-    firewall = {
+    firewall.enable = true;
-      enable = true;
-
-      allowedTCPPorts = [
-        22
-      ];
-    };
   };
 
   virtualisation.podman.enable = true;

nixos/openssh.nix

@@ -10,4 +10,6 @@
       PermitRootLogin = "no";
     };
   };
+
+  networking.firewall.allowedTCPPorts = [ 22 ];
 }