ncc/modules/network.mod.nix

{
  homeModules.network-tools =
    { pkgs, ... }:
    {
      packages = [
        (pkgs.curl.override {
          gnutlsSupport = false;
          opensslSupport = true; # OpenSSL supports QUIC.
          wolfsslSupport = false;
          rustlsSupport = false;

          brotliSupport = true;
          zlibSupport = true;
          zstdSupport = true;

          c-aresSupport = true;

          http2Support = true;
          http3Support = true;

          gsaslSupport = true;

          idnSupport = true;
          ldapSupport = true;
          pslSupport = true;
          rtmpSupport = true;
          scpSupport = true;
          websocketSupport = true;
        })

        (pkgs.xh.override {
          wihtNativeTls = false; # Use rustls.
        })

        pkgs.dig
        pkgs.doggo

        pkgs.dublin-traceroute
      ];
    };

  homeModules.wifi-alias =
    { config, pkgs, ... }:
    let
      showPasswordDarwin = pkgs.writeShellScript "show-password" ''
        echo "You really thought, didn't you! TODO"
        exit 1
      '';

      showPasswordLinux = "${pkgs.networkmanager}/bin/nmcli dev wifi show-password";
    in
    {
      programs.nushell.aliases.wifi =
        if config.nixpkgs.system.hostPlatform.isLinux then
          showPasswordLinux
        else if config.nixpkgs.system.hostPlatform.isDarwin then
          showPasswordDarwin
        else
          throw "Unsupported OS";
    };

  nixosModules.network =
    { config, lib, ... }:
    let
      inherit (lib.attrsets) attrNames filterAttrs getAttr;
      inherit (lib.trivial) const;
    in
    {
      networking.useNetworkd = true;

      networking.nftables.enable = true;

      networking.networkmanager.enable = true;

      users.extraGroups.networkmanager.members =
        config.users.users |> filterAttrs (const <| getAttr "isNormalUser") |> attrNames;
    };
}