_:
{
  networking = {
    hostName = "voyager";
    networkmanager.enable = false;
    useDHCP = false;

    interfaces = {
      enp3s0 = {
        useDHCP = true; # WAN DHCP
      };

      enp4s0 = {
        ipv4.addresses = [{
          address = "10.11.0.1";
          prefixLength = 24;
        }];
      };
      enp6s0 = {
        useDHCP = true;
      };
    };

    nat = {
      enable = true;
      externalInterface = "enp3s0";  # WAN
      internalInterfaces = [ "enp4s0" ];  # LAN
    };

    firewall = {
      enable = true;
      #extraCommands = ''
      #  iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
      #'';
    };
  };
}