Turn on opinionated defaults

config/default.nix

@@ -64,6 +64,9 @@ lib.mkMerge [
       };
     };
 
+    # trust sandro to set good defaults in nixos-modules
+    opinionatedDefaults = true;
+
     services = {
       gnome.gnome-initial-setup.enable = false;
       openssh = {
@@ -106,7 +109,6 @@ lib.mkMerge [
 
   (lib.mkIf config.services.nginx.enable {
     services.nginx = {
-      openFirewall = true;
       recommendedGzipSettings = true;
       recommendedOptimisation = true;
       recommendedProxySettings = true;