{
  config,
  lib,
  pkgs,
  ...
}:
with lib; {
  config = {
    cynerd = {
      openvpn.oldpersonal = true;
    };

    networking = {
      # TODO we need vlan filtering to filter out guest network
      bridges = {
        brlan = {
          interfaces = [
            "lan0"
            "lan1"
            "lan2"
            "lan3"
            "lan4"
          ];
        };
        #brguest = {
        #  interfaces = [
        #    "brlan.2" #"mlan0host" "wlp1s0host"
        #  ];
        #};
      };
      interfaces.brlan = {
        ipv4 = {
          addresses = [
            {
              address = config.cynerd.hosts.spt.omnia;
              prefixLength = 24;
            }
          ];
        };
      };
      nameservers = ["127.0.0.1" "1.1.1.1" "8.8.8.8"];
      dhcpcd.allowInterfaces = ["end2"];
    };

    services.syncthing = {
      enable = true;
      openDefaultPorts = true;

      overrideDevices = false;
      overrideFolders = false;

      dataDir = "/data";
    };
  };
}