{
  pkgs,
  ...
}:
{
  imports = [ ];

  boot.kernel.sysctl = {
    "net.ipv4.ip_forward" = "1";
    "net.ipv6.conf.all.forwarding" = "1";
  };

  networking.useDHCP = false;
  networking.nftables.enable = true;
  systemd.network = {
    enable = true;
    networks = {
      "10-ethUpstream" = {
        matchConfig.MACAddress = "BC:24:11:D2:69:8D";
        address = [ "10.31.245.2/24" ];
        gateway = [ "10.31.245.1" ];
      };
      "10-ethMgmt" = {
        matchConfig.MACAddress = "BC:24:11:A3:38:4E";
        address = [ "10.20.24.1/24" ];
      };
    };
  };

  # DO NOT CHANGE
  # this defines the first version of NixOS that was installed on the machine so that programs with non-migratable data files are kept compatible
  home-manager.users.noc.home.stateVersion = "24.11";
  system.stateVersion = "24.11";
}