_:
{
  networking = {
    hostName = "voyager";
    networkmanager.enable = false;
    useDHCP = false;

    interfaces.enp3s0 = {
      useDHCP = true; # WAN DHCP
    };

    interfaces.enp4s0 = {
      ipv4.addresses = [{
        address = "10.11.0.1";
        prefixLength = 24;
      }];
    };

    nat = {
      enable = true;
      externalInterface = "enp3s0";  # WAN
      internalInterfaces = [ "enp4s0" ];  # LAN
    };

    firewall = {
      enable = true;
      
      extraCommands = ''
        iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
      '';
    };
  };
}