{...}: {
  flake.nixosModules.network = {...}: {
    networking = {
      networkmanager.enable = true;
      # Firewall intentionally disabled (trusted LAN; local services like
      # weylus / remote play need open ports).
      firewall.enable = false;
    };

    # Don't block boot waiting for a network connection.
    systemd.services.NetworkManager-wait-online.enable = false;
  };
}