{ config, lib, ... }:
let
  cfg = config.os.core.network;
in
{
  options.os.core.network.enable = lib.mkEnableOption "system-wide networking setup";
  config = lib.mkIf cfg.enable {
    networking = {
      networkmanager = {
        enable = true;
        wifi.macAddress = "stable-ssid";
        ethernet.macAddress = "stable-ssid";
      };
      firewall = {
        enable = true;
        allowedTCPPorts = [ ];
        allowedUDPPorts = [ ];
      };
    };
    systemd.services."NetworkManager-wait-online".enable = false;
  };
}