{ config, pkgs, ... }@all: with all; {
  networking = {
    nameservers = pkgs.lib.mkIf (hyper.host != "NxDCS") [ # wsl manages resolv.conf
      "1.1.1.1"
      "8.8.8.8"
    ];
    hostName = hyper.host;
    networkmanager = {
      enable = true;
    };
    enableIPv6 = true;
    firewall.allowedTCPPorts = [ 
      8000
      8080
      (pkgs.lib.mkIf config.services.nginx.enable 80)
      (pkgs.lib.mkIf config.services.nginx.enable 443)
      (pkgs.lib.mkIf config.services.ollama.enable 11434)
      (pkgs.lib.mkIf config.services.maddy.enable 587)
      (pkgs.lib.mkIf config.services.maddy.enable 465)
      (pkgs.lib.mkIf config.services.maddy.enable 993)
      (pkgs.lib.mkIf config.services.maddy.enable 25025)
    ];
  };
}