{ ... }: {

    flake.nixosModules.hotspot = { config, lib, ... }: {

        networking.firewall.interfaces."wlo1" = {
            allowedUDPPorts = [ 53 67 68 ];
            allowedTCPPorts = [ 53 67 68 ];
        };

        networking.networkmanager.dns = lib.mkForce "dnsmasq";

        services.dnsmasq.enable = true;

        /*sops.secrets."hotspotPass".sopsFile = ./secrets.yaml;

        services.hostapd = {
            enable = true;

            radios.wlo1 = {
                networks.wlo1 = {
                    ssid = "laptopHotspot";
                    authentication.saePasswords = [{ passwordFile = "${config.sops.secrets."hotspotPass".path}"; }];
                };
            };
        };*/

    };
}