{ pkgs, ... }:

{
  # Networking
  networking.networkmanager.enable = true;

  networking.nameservers = [
    "1.1.1.1#one.one.one.one"
    "1.0.0.1#one.one.one.one"
    "9.9.9.9"
    "149.112.112.112"
    "2620:fe::fe"
    "2620:fe::9"
  ];

  services.resolved = {
    enable = true;
    dnssec = "true";
    domains = [ "~." ];
    fallbackDns = [
      "1.1.1.1#one.one.one.one"
      "1.0.0.1#one.one.one.one"
      "9.9.9.9"
      "149.112.112.112"
      "2620:fe::fe"
      "2620:fe::9"
    ];
    extraConfig = ''
      DNSOverTLS=yes
    '';
  };

  # Firewall
  networking.firewall.allowedTCPPorts = [ 24872 8998 ];
  networking.firewall.allowedUDPPorts = [ 24872 8998 ];
  #networking.firewall.enable = false;

  # Network services
  #services.openssh.enable = true;

  #services.syncplay = {
  #  enable = true;
  #  port = 8998;
  #  extraArgs = [ "--password pouicbarilstepson123cassoulet" ];
  #};
}