{ pkgs, ... }:

{

  imports = [
    ./systemd-networkd.nix
    ./ppp.nix
    ./nftables.nix
    ./dnsmasq.nix
  ];

  boot = {
    kernel.sysctl."net.ipv4.ip_forward"          = true;
    kernel.sysctl."net.ipv6.conf.all.forwarding" = true;
  };

  environment.systemPackages = with pkgs; [
    wireguard-tools
  ];

  services.avahi.allowInterfaces = [ "brlan" ];
  networking.useDHCP             = false;

}