{ flakeRoot, ... }:
{
  imports = [ (flakeRoot + /wireguard.nix) ];

  networking = {
    hostName = "sagittarius";
    useNetworkd = true;
    firewall = {
      allowedTCPPorts = [ 22 ];
    };
  };

  systemd.network = {
    enable = true;

    networks = {
      "10-wan" = {
        matchConfig.Name = "enp1s0";
        networkConfig.DHCP = "ipv4";
        address = [ "2a01:4f9:c012:c7a7::1/64" ];
        routes = [ { Gateway = "fe80::1"; } ];
      };
    };
  };
}