{ lib, config, pkgs, ... }:

{
  networking = {
    useDHCP = lib.mkDefault true;

    networkmanager = {
      enable = true;
      wifi.backend = "iwd";
    };

    wireless = {
      iwd.enable = true;
      userControlled.enable = true;
    };

    firewall = {
      enable = true;

      # KDE Connect: discovery + encrypted connections
      allowedTCPPortRanges = [
        { from = 1714; to = 1764; }
      ];

      allowedUDPPortRanges = [
        { from = 1714; to = 1764; }
      ];
    };
  };

  # Ensure NetworkManager tools are available
  environment.systemPackages = [
    pkgs.networkmanager
  ];
}