{ config, pkgs, ...}:

{
  networking.vlans."net-services" = {
    id = 10;
    interface = "ens18";
  };

  networking.interfaces.net-services.ipv4.addresses = [
    { address = "10.42.10.1"; prefixLength = 24; }
    { address = "10.42.10.2"; prefixLength = 24; }
  ];
  networking.interfaces.net-services.ipv6.addresses = [
    { address = "fe80::1"; prefixLength = 64; }
    { address = "fd00:10:42:10::1"; prefixLength = 64; }
    { address = "fd00:10:42:10::2"; prefixLength = 64; }
    { address = "2a01:4f8:1c0c:8221::1"; prefixLength = 64; }
    { address = "2a01:4f8:1c0c:8221::2"; prefixLength = 64; }
  ];

  services.radvd.config = ''
    interface net-services {
      AdvSendAdvert on;
      prefix ::/64 {};
      RDNSS 2a01:4f8:1c0c:8221::8 {};
      DNSSL bula22.de {};
    };
  '';

  # Everyone is allowed reaching this, no firewall therefore

  clerie.uplink-selector.interfaces.net-services.uplink = "uplink-a";
}