let
  net = import ../config/network.nix;
  allowedPorts = net.tunnel.allowedPorts;
in
{
  inherit allowedPorts;

  isAllowedTunnelPort = port:
    builtins.isInt port && builtins.elem port allowedPorts;
}