nixos-config/hosts/nuc/modules/networks/default.nix

{ ... }:
{
  fileSystems."/media/movies" = {
    device = "fujitsu.vpn.rfive.de:/movies";
    fsType = "nfs";
  };
  fileSystems."/media/shows" = {
    device = "fujitsu.vpn.rfive.de:/shows";
    fsType = "nfs";
  };
  networking = {
    hostName = "nuc";
    domain = "rfive.de";
    useNetworkd = true;
    enableIPv6 = true;
    nftables.enable = true;
    firewall = {
      extraInputRules = ''
        ip saddr 192.168.0.0/16 tcp dport 19531 accept comment "Allow journald gateway access from local networks"
      '';
    };
  };
  services.resolved = {
    enable = true;
    fallbackDns = [
      "9.9.9.9"
      "149.112.112.112"
      "2620:fe::fe"
      "2620:fe::9"
    ];
  };
  systemd.network = {
    enable = true;
    networks."10-loopback" = {
      matchConfig.Name = "lo";
      linkConfig.RequiredForOnline = false;
    };
    networks."10-wired" = {
      matchConfig.Name = "eno1";
      address = [ "192.168.42.2/24" ];
      routes = [{
        Gateway = "192.168.42.1";
      }];
      networkConfig = {
        DNS = [
          "192.168.42.1"
        ];
        LLDP = true;
        EmitLLDP = "nearest-bridge";
        DNSSEC = false;
      };
    };
  };
}