let
  defaultRules = [
    { Match.Name = "ens*"; Network.DHCP = "yes"; }
    {
      Match = { Virtualization = "container"; Name = "host0"; };
      Network.DHCP = "yes";
    }
    {
      Match = { Name = "ve-*"; Driver = "veth" ; };
      Network = {
        Address = "0.0.0.0/28";
        DHCPServer = "yes";
        IPMasquerade = "yes";
      };
    }
    {
      Match = { Name = "vz-*"; Driver = "bridge" ; };
      Network = {
        Address = "0.0.0.0/28";
        DHCPServer = "yes";
        IPMasquerade = "yes";
      };
    }
  ];
  myRules = [
    {
      Match.Name = "ens*";
      Network = { DHCP = "no"; DNS = [ "8.8.8.8" ]; Address = "192.168.0.3/24"; };
    }
  ];
{
  systemd.networks = mkMerge [
    (mkAfter defaultRules)
    (mkBefore myRules)
  ];
}