{ services.sunshine = { enable = true; capSysAdmin = true; openFirewall = true; }; }