manifests/policies/oceanbox/network/templ.nix

{ ... }:
{
  applications.xxx = {
    resources = {
      ciliumClusterwideNetworkPolicies = {
        xxx.spec = {
        };
      };
    };
  };
}