{ pkgs, lib, config, ... }: {
  environment.defaultPackages = [
    pkgs.inetutils
    pkgs.tcpdump
  ];

  networking.useNetworkd = true;
  systemd.network.enable = true;

  nix = {
    nixPath = [
      "nixpkgs=${toString <nixpkgs>}"
    ];
    channel.enable = false;
    settings = {
      nix-path = config.nix.nixPath;
      experimental-features = [
        "pipe-operator"
        "nix-command"
      ];
    };
    package = pkgs.lix;
  };

  users.users.root = {
    password = "vxlan";
    initialHashedPassword = lib.mkForce null;
  };

  system.stateVersion = "25.05";
}