{ lib, ... }:

{

  networking.hostName = "persephone";

  networking.useDHCP = lib.mkDefault true;

  networking.wireless.iwd = {
    enable = true;
    settings = {
      General = {
        EnableNetworkConfiguration = false; # Let dhcpcd handle this
      };
      Network = {
        EnableIPv6 = true;
        NameResolvingService = "systemd";
      };
    };
  };

  networking.dhcpcd = {
    enable = true;
    extraConfig = ''
      nohook resolv.conf  # Don't let dhcpcd manage resolv.conf
    '';
  };

  networking.resolvconf.enable = false;

  services.avahi.enable = true;

  services.resolved = {
    enable = true;

    dnssec = "true";
    domains = [ "~." ];
    fallbackDns = [
      "9.9.9.9#dns.quad9.net"
      "149.112.112.112#dns.quad9.net"
      "2620:fe::fe#dns.quad9.net"
      "2620:fe::9#dns.quad9.net"
    ];

    extraConfig = ''
      DNSOverTLS=yes
    '';
  };

  services.openssh.enable = true;
}