{ config, pkgs, ... }@all: with all; {
  networking = {
    nameservers = pkgs.lib.mkIf (hyper.host != "NxDCS") [ # wsl manages resolv.conf
      "1.1.1.1"
      "8.8.8.8"
    ];
    hostName = hyper.host;
    networkmanager = {
      enable = true;
    };
    enableIPv6 = true;
    firewall.allowedTCPPorts = [ 
      (pkgs.lib.mkIf config.services.ollama.enable 11434)
      80
      443
      8000
      8080
      (pkgs.lib.mkIf config.services.postfix.enable 587)
      (pkgs.lib.mkIf config.services.dovecot2.enable 993)
    ];
  };
}