{ pkgs, lib, ... }:
{
  services.fail2ban.enable = true;
  services.resolved.domains = [
    "surfsite.org"
    "hoyer.xyz"
  ];
  services.resolved.extraConfig = "ReadEtcHosts=no";
  services.nscd.enableNsncd = false;

  networking.firewall.allowedTCPPorts = [
    80
    443
  ];
  networking.firewall.allowPing = true;

  networking.hostName = "mx"; # Define your hostname.
  networking.domain = "surfsite.org";
  networking.dhcpcd.enable = false;
  networking.firewall.logRefusedConnections = false;
  networking.networkmanager.enable = false;
  networking.useDHCP = false;
  networking.useNetworkd = true;
  networking.wireless.enable = false;
  networking.defaultGateway.address = "95.216.66.129";
  networking.defaultGateway.interface = "enp0s31f6";
  #networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];
  networking.enableIPv6 = true;

  networking.interfaces.enp0s31f6 = {
    ipv6 = {
      addresses = [
        {
          address = "2a01:4f9:2b:2e3::2"; # Your IPv6 here
          prefixLength = 64;
        }
      ];
      # Default IPv6 route
      routes = [
        {
          address = "::";
          prefixLength = 0;
          via = "fe80::1";
        }
      ];
    };
    ipv4.addresses = [
      {
        address = "95.216.66.178";
        prefixLength = 26;
      }
    ];
  };
}