{ lib, config, ... }: let
	cfg = config._users.timmy.wifi;
in {
	options._users.timmy.wifi = {
		enable = lib.mkEnableOption "enables wifi";
	};

	config = lib.mkIf cfg.enable {
		# Load wpa_supplicant.conf secret config
		sops.secrets.wpa_supplicant-conf.sopsFile = ./resources/secrets/wpa_supplicant-conf.yaml;

		networking.wireless = {
			enable = true;  # Enables wireless support via wpa_supplicant.
			_extraSecretConfigs.networks = config.sops.secrets.wpa_supplicant-conf.path;  # Load secret network config via systemd credential
		};
	};
}