{
  config,
  lib,
  ...
}: {
  users.users.root.openssh.authorizedKeys.keys = import ../../../identities.nix;

  networking = {
    networkmanager.enable = lib.mkForce false;

    firewall.allowedTCPPorts = [
      8080

      # For 'localsend'
      # https://github.com/localsend/localsend?tab=readme-ov-file#setup
      53317
    ];

    # To enable roaming https://wiki.archlinux.org/title/Wpa_supplicant#Roaming
    wireless = {
      enable = true;
      userControlled.enable = true;
      secretsFile = config.age.secrets.wpa_password.path;
      scanOnLowSignal = false;
      networks = let
        fromList = import ../../../networks/wpa_supplicant-compat.nix;
        networks = import ../../../networks/list.nix;
      in
        fromList (
          builtins.filter (x: x.ssid == "~") networks
        );
    };
  };

  hardware.bluetooth.enable = true;
}