{ config, lib, pkgs, ... }:

with lib; {

  networking = {
    eno1.useDHCP = false;
    eno2.useDHCP = false;
    eno3.useDHCP = false;
    eno4.useDHCP = false;
    enp33s0f0.useDHCP = false;
    enp33s0f1.useDHCP = false;
    enp9s0f0.useDHCP = false;
    enp9s0f1.useDHCP = false;

    intif0 = { useDHCP = true; };
  };

  fudo = {
    secrets.backplane-client-nostromo-passwd = {
      source-file = /srv/secrets/backplane-client/nostromo.passwd;
      target-file = "/srv/backplane/dns/client.passwd";
      target-host = "nostromo";
      user = config.fudo.client.dns.user;
    };

    client.dns = {
      enable = true;
      ipv4 = false;
      ipv6 = true;
      user = "fudo-client";
      external-interface = "extif0";
      password-file = "/srv/client/secure/client.passwd";
    };
  };

  virtualization = {
    libvirtd = {
      enable = true;
      qemuPackage = pkgs.qemu_kvm;
      onShutdown = "shutdown";
    };
  };
}