{
  networking.firewall.allowedTCPPorts = [6443];
  
  services.k3s = {
    enable = true;
    role = "server";
    manifests = {
      test-color.source = ../manifests/test;
    };
  };
}