{ config, lib, ... }: with lib; {
  networking = {
    domain = mkDefault "kyouma.net";
    nftables.enable = mkDefault true;
    firewall.logRefusedConnections = mkDefault false;
  };

  systemd.network.enable = true;
  networking.dhcpcd.enable = false;

  services.resolved = {
    enable = true;
    dnssec = "true";
  };
}