{ config, lib, ... }:
{
  networking.nftables.tables.forwarding = {
    family = "inet";
    content = ''
      chain PREROUTING {
        type nat hook prerouting priority dstnat; policy accept;
        tcp dport 2211 dnat ip to 10.2.0.100:22 comment "SSH to Tower"
        tcp dport 2222 dnat ip to 10.2.0.2:22 comment "SSH to Kitty"
        
        udp dport { 27005, 27015 } dnat ip to 10.2.0.100 comment "PC Hosted Games"
        
        tcp dport { 48010, 47989, 47984 } dnat ip to 10.2.0.100 comment "PC Sunshine TCP"
        udp dport { 47998, 47999, 48000 } dnat ip to 10.2.0.100 comment "PC Sunshine UDP"
        
        tcp dport { 38010, 37989, 37984 } dnat ip to 10.3.0.1 comment "VM Sunshine TCP"
        udp dport { 37998, 37999, 38000 } dnat ip to 10.3.0.1 comment "VM Sunshine UDP"
      }

      chain POSTROUTING {
        type nat hook postrouting priority 100; policy accept;
        oifname "enp0s31f6" masquerade
      }
    '';
  };

  # Enable IP forwarding for the server configuration
  boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
}