{ ... }:

{
  networking = {
    hostName = "k8s";
    domain = "berlin.ccc.de";
    search = [ "berlin.ccc.de" ];
    useNetworkd = true;
    dhcpcd.enable = false;
    nftables.enable = true;
    useDHCP = false;
    nameservers = [
      "2001:678:560:42::1"
    ];
    defaultGateway6 = {
      address = "fe80::6eb3:11ff:fe11:8f55";
      interface = "eno4";
    };
    defaultGateway = {
      address = "195.160.172.5";
      interface = "eno4";
    };
    interfaces.eno3 = {
      ipv6.addresses = [{ address = "2001:678:560:42::88"; prefixLength = 64; }];
      ipv4.addresses = [{ address = "195.160.172.88"; prefixLength = 24; }];
    };
    firewall.enable = true;
  };
  services.resolved = {
    enable = true;
    settings.Resolve = {
      DNSOverTLS = "opportunistic";
      DNSSEC = "allow-downgrade";
      FallbackDNS = [
        "2606:4700:4700::1111#one.one.one.one"
        "1.1.1.1#one.one.one.one"
      ];
      LLMNR = true;
      MulticastDNS = true;
    };
  };
}