{
  services = {
    portunus = {
      enable = true;
      domain = "users.thewordnerd.info";
      ldap = {
        suffix = "dc=thewordnerd,dc=info";
      };
    };
  };
  networking.firewall.interfaces."ve-+".allowedTCPPorts = [
    389
  ];
}