{config, ...}: {
  services.resolved.enable = true;

  networking = {
    networkmanager = {
      enable = true;
      dns = "systemd-resolved";
    };
    firewall.enable = false;
  };

  users.groups.networkmanager.members = config.users.normalUsers;
}