{
  networking.useDHCP = false;

  networking.networkmanager = {
    dns = "systemd-resolved";
    enableStrongSwan = false;
    extraConfig = ''
      [connectivity]
      uri=http://whoami.privatevoid.net/online
      response=CONNECTED_GLOBAL
      interval=120
    '';
  };
  services.resolved = {
    enable = true;
    fallbackDns = [ "10.1.0.1" ];
    llmnr = "true";
    dnssec = "false";
    extraConfig = "Cache=no-negative";
  };
  networking.firewall = let
    ports = [
      5355 # llmnr
    ];
  in {
    allowedTCPPorts = ports;
    allowedUDPPorts = ports;
  };
}