{
  networking = {
    networkmanager = {
      enable = true;

      # Randomize MAC for every ethernet connetion
      # ethernet.macAddress = "random";
      # connectionConfig = {
      #   # IPv6 Privacy Extensions
      #   "ipv6.ip6-privacy" = 2;

      #   # unique DUID per connection
      #   "ipv6.dhcp-duid" = "stable-uuid";
      # };
    };

    firewall = {
      enable = true;
      trustedInterfaces = ["tailscale0"];
    };
  };
}