{ secrets, ... }:
{
  imports = [
    ./firewall
    ./vpn
    ./dhcpcd.nix
    ./ipv6.nix
    ./loopback.nix
    ./networkmanager.nix
    ./optimise.nix
    ./resolved.nix
    ./tor.nix
  ];

  # https://discourse.nixos.org/t/rebuild-error-failed-to-start-network-manager-wait-online/41977/2
  systemd.network.wait-online.enable = false;
  boot.initrd.systemd.network.wait-online.enable = false;

  # https://discourse.nixos.org/t/how-to-disable-networkmanager-wait-online-service-in-the-configuration-file/19963/2
  systemd.services.NetworkManager-wait-online.enable = false;

  networking = {
    hostName = "kansai";
    nftables.enable = true;

    nameservers = [
      "45.90.28.0#${secrets.nextdns_id}.dns.nextdns.io"
      "2a07:a8c0::#${secrets.nextdns_id}.dns.nextdns.io"
      "45.90.30.0#${secrets.nextdns_id}.dns.nextdns.io"
      "2a07:a8c1::#${secrets.nextdns_id}.dns.nextdns.io"
    ];

    timeServers = [
      "0.nixos.pool.ntp.org"
      "1.nixos.pool.ntp.org"
      "2.nixos.pool.ntp.org"
      "3.nixos.pool.ntp.org"
    ];
  };
}