nixos-servers/nixos-modules/networking/default.nix

{ lib, machine, ... }: {
  config = {
    networking = {
      domain = "dmz";
      nftables.enable = true;
      useDHCP = false;

      firewall = {
        enable = true;
      };
    };

    systemd.network = {
      enable = true;

      networks = lib.attrsets.mergeAttrsList [
        (lib.optionalAttrs (! machine.isRaspberryPi) {
          "30-main-nic" = {
            matchConfig.Name = "en*";

            networkConfig = {
              DHCP = "yes";
            };
          };
        })
        (lib.optionalAttrs machine.isRaspberryPi {
          "30-main-nic" = {
            matchConfig.Name = "end*";
            networkConfig = {
              IPv6AcceptRA = true;
              DHCP = "yes";
            };
          };
        })
      ];
    };
  };
}