move steam to its own file

modules/desktop.nix

@@ -4,8 +4,9 @@
   imports = [
     ./common.nix
     ./docker.nix
-    ./restic
     ./droidcam
+    ./restic
+    ./steam
     ./xonsh
   ];
 
@@ -45,10 +46,6 @@
   sound.enable = true;
   hardware.pulseaudio.enable = true;
 
-  # enable steam
-  programs.steam.enable = true;
-  hardware.steam-hardware.enable = true;
-
   # enable lockscreen
   programs.xss-lock = {
     enable = true;

modules/steam/default.nix

@@ -0,0 +1,10 @@
+{ ... }:
+{
+  programs.steam.enable = true;
+  hardware.steam-hardware.enable = true;
+  networking.firewall = {
+    allowedTCPPorts = [ 27036 ];
+    allowedUDPPorts = [ 27031 ];
+  };
+
+}