{ lib
, ...
}:

{
  imports = [
    ./network-manager.nix
    ./ports.nix
  ];

  networking.firewall.logRefusedConnections = lib.mkDefault false;

  networking.nftables.enable = true;
}