{
  inputs',
  pkgs,
  ...
}: let
  notnft = inputs'.notnft.lib.${pkgs.stdenv.system};
in {
  programs.alvr.enable = true;

  programs.nix-ld.enable = true;

  programs.nix-ld.libraries = with pkgs; [
    libva
    alsa-lib
    wayland
    libxkbcommon
    libglvnd
    xorg.libX11
    xorg.libXcursor
    xorg.libXi
    at-spi2-core
  ];

  networking.notnft.firewall.interfaces = with notnft.dsl;
  with payload; let
    rules = [
      [(is.eq ip.protocol (f: f.tcp)) (is.eq th.dport "9943") accept]
      [(is.eq ip.protocol (f: f.tcp)) (is.eq th.dport "9944") accept]
      [(is.eq ip.protocol (f: f.udp)) (is.eq th.dport "9943") accept]
      [(is.eq ip.protocol (f: f.udp)) (is.eq th.dport "9944") accept]
    ];
  in {
    "wlan0".rules.input = rules;
    "eth0".rules.input = rules;
  };
}