I can never remember how to do this thing. I grew up on ss. So for posterity:

programs.zsh.shellAliases = {
  ss = "sudo lsof -PiTCP -sTCP:LISTEN";
};