{
  config,
  lib,
  inputs,
  ...
}: {
  imports = [./wireguard.nix];

  services.openssh.settings.PasswordAuthentication = false;

  networking = {
    interfaces = {
      enp0s31f6 = {
        ipv4 = {
          addresses = [
            {
              address = "88.99.90.90";
              prefixLength = 26;
            }
          ];
        };
        ipv6 = {
          addresses = [
            {
              address = "2a01:4f8:10a:1aab::1";
              prefixLength = 64;
            }
          ];
        };
      };
    };
    defaultGateway = {
      interface = "enp0s31f6";
      address = "88.99.90.65";
    };
    defaultGateway6 = {
      interface = "enp0s31f6";
      address = "fe80::1";
    };
  };

  services.resolved.enable = true;
  services.resolved.extraConfig = ''
    DNS=185.12.64.1 185.12.64.2 2a01:4ff:ff00::add:1 2a01:4ff:ff00::add:2 
  '';
}