{lib, pkgs, ...}: {
  networking.useDHCP = lib.mkDefault true;
  networking.networkmanager = {
    enable = true;
    plugins = with pkgs; [
      networkmanager-openvpn
    ];
  };
  # tailscale
  services.tailscale.enable = true;

  networking.nftables.enable = true;
}