{ config, lib, pkgs, ... }:

with lib;

{

  options.profiles.clerie.router = {
    enable = mkEnableOption "Basic router setup";
  };

  config = mkIf config.profiles.clerie.router.enable {

    environment.systemPackages = with pkgs; [
      wireguard-tools
      tcpdump
    ];
  
    boot.kernel.sysctl = {
      "net.ipv4.ip_forward" = true;
      "net.ipv6.conf.all.forwarding" = true;
    };
  
    networking.firewall.checkReversePath = false;

  };
}