{...}:
{
services.k3s = {
enable = true;
role = "server";
};
environment.systemPackages = [ pkgs.k3s ];
networking.firewall.allowedTCPPorts = [ 6443 ];
}