nix/hosts/laptop-server/modules/networking.nix

{ ... }:
{
    networking = {
        hostName = "ty-laptop-server";

        # Enable firewall
        firewall = {
            enable = true;
            trustedInterfaces = [ "lo" "ve-jellyfin" ];
        };

        # Enable NetworkManager
        networkmanager.enable = true;
    };

    # Tailscale overlay network configuration
    services.tailscale = {
        enable = true;
        useRoutingFeatures = "both";
        openFirewall = true;
    };
}