{
  config,
  pkgs,
  flake,
  ...
}:
{
  networking = {
    hostName = "tankstelle";
    enableIPv6 = true;
    defaultGateway = {
      address = "80.244.242.1";
      interface = "enp1s0";
    };
    defaultGateway6 = {
      address = "2001:4d88:1ffa:26::1";
      interface = "enp1s0";
    };
    nameservers = [
      "95.129.51.51"
      "80.244.244.244"
    ];
    interfaces."enp1s0" = {
      ipv4.addresses = [
        {
          address = "80.244.242.5";
          prefixLength = 29;
        }
      ];
      ipv6.addresses = [
        {
          address = "2001:4d88:1ffa:26::5";
          prefixLength = 64;
        }
      ];
    };
  };

  # TODO: ssh via wireguard only
  services.openssh.openFirewall = true;
}