darwin/networking: enable application firewall config

basically defaults, but explicit

Author: khaneliman

modules/darwin/system/networking/default.nix

@@ -16,6 +16,14 @@ in
 
   config = mkIf cfg.enable {
     networking = {
+      applicationFirewall = {
+        enable = true;
+
+        allowSignedApp = true;
+        blockAllIncoming = false;
+        enableStealthMode = false;
+      };
+
       dns = [
         "1.1.1.1"
         "1.0.0.1"

templates/snowfall/modules/darwin/system/networking/default.nix

@@ -16,20 +16,18 @@ in
 
   config = mkIf cfg.enable {
     networking = {
+      applicationFirewall = {
+        enable = true;
+
+        allowSignedApp = true;
+        blockAllIncoming = false;
+        enableStealthMode = false;
+      };
+
       dns = [
         "1.1.1.1"
         "8.8.8.8"
       ];
     };
-
-    system.defaults = {
-      # firewall settings
-      alf = {
-        # 0 = disabled 1 = enabled 2 = blocks all connections except for essential services
-        globalstate = 1;
-        loggingenabled = 0;
-        stealthenabled = 0;
-      };
-    };
   };
 }