let
  ata-interface = "enp2s0";
in
{
  # clan.core.vars.generators.networking.files.ata-interface.secret = false;

  networking.interfaces = {
    ${ata-interface} = {
      useDHCP = false;
      ipv4.addresses = [
        {
          address = "192.168.254.1";
          prefixLength = 24;
        }
      ];
    };
  };

  services.dnsmasq = {
    enable = true;

    settings = {
      bind-interfaces = true;
      server = [
        "1.1.1.1"
        "8.8.8.8"
      ];
      domain-needed = true;
      domain = "localhost";
      dhcp-range = [ "192.168.254.10,192.168.254.240,255.255.255.0,24h" ];
      dhcp-option = [
        "3,192.168.254.1"
        "6,8.8.8.8,8.8.4.4"
      ];
      interface = [ ata-interface ];
    };
  };

  networking.firewall.allowedUDPPorts = [
    53
    67
  ];
  networking.firewall.allowedTCPPorts = [ 53 ];
}