WIP exports: draft endpoints for services along with a 'firwewall' consumer

lib/modules/clan/interface.nix

@@ -120,6 +120,30 @@ in
       visible = false;
       type = types.deferredModule;
       default = {
+        options.endpoints = lib.mkOption {
+          type = types.attrsWith {
+            placeholder = "endpointName";
+            elemType = (
+              types.submodule {
+                options = {
+                  port = lib.mkOption {
+                    type = types.int;
+                    description = "The port the service is running on";
+                  };
+                  protocol = lib.mkOption {
+                    type = types.enum [
+                      "tcp"
+                      "udp"
+                    ];
+                    default = "tcp";
+                    description = "The protocol used to access the service";
+                  };
+                };
+              }
+            );
+          };
+          default = { };
+        };
         options.networking = lib.mkOption {
           default = null;
           type = lib.types.nullOr (