{lib, ...}: {
  nixpkgs.config.allowUnfree = true;
  hardware.enableAllFirmware = true;
  boot.extraModprobeConfig = ''
    options cfg80211 ieee80211_regdom="CZ"
  '';
  services.hostapd = {
    enable = true;
    radios = {
      "wlp3s0" = {
        channel = 7;
        countryCode = "CZ";
        wifi4 = {
          enable = true;
          inherit (lib.hostapd.qualcomAtherosAR9287.wifi4) capabilities;
        };
        networks."wlp3s0" = {
          ssid = "NixOSInstallFest";
          authentication = {
            mode = "wpa2-sha256";
            wpaPassword = "InstallFest2024";
          };
        };
      };
      "wlp2s0" = {
        channel = 36;
        band = "5g";
        countryCode = "CZ";
        wifi4 = {
          enable = true;
          inherit (lib.hostapd.qualcomAtherosQCA988x.wifi4) capabilities;
        };
        wifi5 = {
          enable = true;
          inherit (lib.hostapd.qualcomAtherosQCA988x.wifi5) capabilities;
        };
        networks."wlp2s0" = {
          ssid = "NixOSInstallFest5";
          authentication = {
            mode = "wpa2-sha256";
            wpaPassword = "InstallFest2024";
          };
        };
      };
    };
  };

  systemd.network.networks = {
    "lan-wlp3s0" = {
      matchConfig.Name = "wlp3s0";
      networkConfig.Bridge = "brlan";
    };
    "lan-wlp2s0" = {
      matchConfig.Name = "wlp2s0";
      networkConfig.Bridge = "brlan";
    };
  };
}