{ config, pkgs, lib, ... }:

{
  # Hostname
  networking.hostName = "numbus-server";

  networking.networkmanager.enable = false;

  networking.nftables.enable = true;
  networking.firewall.enable = true;

  # Allow rootless containers to bind to port 53 and up
  boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;

  # Bridge configuration for VMs
  networking.bridges.br0.interfaces = [ "TARGET_INTERFACE" ];
  networking.interfaces.br0.useDHCP = false;
  networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
  networking.interfaces.br0.ipv4.addresses = [{
    address = "HOME_SERVER_IP";
    prefixLength = 24;
  }];
  networking.defaultGateway = {
    address = "HOME_ROUTER_IP";
    interface = "br0";
  };

  # Open ports in the firewall
  networking.firewall.allowPing = true;
  networking.firewall.allowedTCPPorts = [ 53 80 443 ];
  networking.firewall.allowedUDPPorts = [ 53 443 ];
}