{ pkgs, ... }:
{
  environment.systemPackages = [ pkgs.networkmanagerapplet ];

  networking.networkmanager = {
    enable = true;
    plugins = [ pkgs.networkmanager-openvpn ];
    dns = "none"; # "systemd-resolved"
    wifi.backend = "iwd";

    unmanaged = [
      "interface-name:tailscale*"
      "interface-name:br-*"
      "interface-name:rndis*"
      "interface-name:docker*"
      "interface-name:virbr*"
      "interface-name:vboxnet*"
      "interface-name:waydroid*"
      "type:bridge"
    ];
  };
}