{
  config,
  lib,
  pkgs,
  ...
}:
let
  cfg = config.os.core.network;
in
{
  options.os.core.network.enable = lib.mkEnableOption "system-wide networking setup";
  config = lib.mkIf cfg.enable {
    networking = {
      networkmanager = {
        enable = true;
        wifi = {
          macAddress = "random";
          backend = "iwd";
        };
        ethernet.macAddress = "random";
        dns = "systemd-resolved";
      };
      firewall = {
        enable = true;
        allowedTCPPorts = [ ];
        allowedUDPPorts = [ ];
      };
    };
    environment.systemPackages = [ pkgs.impala ];
    services.resolved.enable = true;
    systemd.services."NetworkManager-wait-online".enable = false;
  };
}