{ ... }: {

    flake.nixosModules.hotspot = { config, lib, ... }: {

        networking.firewall.interfaces."wlo1" = {
            allowedUDPPorts = [ 53 67 68 ];
            allowedTCPPorts = [ 53 67 68 ];
        };

        services.dnsmasq.enable = true;

        sops.secrets."hotspotPass".sopsFile = ./secrets.yaml;

        services.hostapd = {
            enable = true;

            radios.wlo1 = {
                networks.wlo1 = {
                    ssid = "laptopHotspot";
                    authentication.saePasswords = [{ passwordFile = "${config.sops.secrets."hotspotPass".path}"; }];
                };

                countryCode = "US";

                wifi4 = {
                    enable = true;
                };
            };
        };

        networking.networkmanager.unmanaged = [ "wlo1" ];
    };
}