{
  networking.useDHCP = false;

  networking.networkmanager.dns = "systemd-resolved";
  networking.networkmanager.enableStrongSwan = false;
  services.resolved = {
    enable = true;
    fallbackDns = [ "10.1.0.1" ];
    llmnr = "true";
    dnssec = "false";
    extraConfig = "Cache=no-negative";
  };
  networking.firewall = let
    ports = [
      5355 # llmnr
    ];
  in {
    allowedTCPPorts = ports;
    allowedUDPPorts = ports;
  };
}