{ lib, pkgs, ... }:
{
  networking = {
    enableB43Firmware = false;
    enableIPv6 = true;
    hostId = "28c6bad2";
    hostName = "zaphod";
    usePredictableInterfaceNames = lib.mkDefault true;
    # Interface config
    interfaces.wlp1s0.useDHCP = lib.mkDefault true;
    # Enable NetworkManager and disable wpa_supplicant
    networkmanager = {
      enable = true;
      dns = lib.mkForce "default";
      wifi.powersave = true;
    };
    wireless = {
      enable = false;
    };

    # Tailscale fix(not needed, but recommended)
    firewall.checkReversePath = "loose";

    # DNS Servers
    # Only use local resolver
    nameservers = lib.mkForce [ ];

    resolvconf.enable = false;
  };
  services.resolved = {
    enable = false;
    llmnr = "true";
    fallbackDns = [ "158.59.252.11" ];
    extraConfig = ''
      MulticastDNS=true
    '';
  };
  systemd.services.wpa_supplicant.environment.OPENSSL_CONF = pkgs.writeText "openssl.cnf" ''
    openssl_conf = openssl_init
    [openssl_init]
    ssl_conf = ssl_sect
    [ssl_sect]
    system_default = system_default_sect
    [system_default_sect]
    Options = UnsafeLegacyRenegotiation
  '';
  services.mullvad-vpn = {
    enable = false;
    package = pkgs.mullvad-vpn;
  };
}