# roles/thin-client/network/default.nix
#
# Network layer: NetworkManager + wpa_supplicant (NOT iwd, because iwd
# has weaker 802.1X support), 802.1X EAP-TLS WiFi, NetBird overlay,
# systemd-resolved for DNS splitting, hardened firewall.
{config, lib, ...}: {
  imports = [
    ./wifi.nix
    ./netbird.nix
    ./dns.nix
    ./firewall.nix
    ./ssh.nix
  ];
}