{ lib, ... }:

{
  boot = {
    loader.systemd-boot.enable = true;
  };

  zramSwap = {
    enable = true;
    algorithm = "zstd";
    swapDevices = 1;
    memoryPercent = 50;
  };

  networking = {
    useDHCP = false;
    nameservers = [
      "1.1.1.1" "1.0.0.1"
      "2606:4700:4700::1111" "2606:4700:4700::1001"
    ];
  };

  # static ipv6 + dhcp ipv4
  systemd.network.enable = true;
  systemd.network.networks."10-wan" = {
    name = "enp1s0";
    DHCP = "ipv4";
    address = [ "2a01:4f9:c012:dce::1" ];
    routes = [ { Gateway = "fe80::1"; } ];
  };

  services.resolved = {
    llmnr = "false";
    extraConfig = "MulticastDNS=no";
    dnssec = "false";
  };
}