{ pkgs, lib, config, ... }:
{
systemd.services."netns@" = {
  description = "%I network namespace";
  before = [ "network.target" ];
  serviceConfig = {
    Type = "oneshot";
    RemainAfterExit = true;
    PrivateNetwork = true;
    ExecStart = "${pkgs.iproute}/bin/ip netns add %i";
    ExecStop = "${pkgs.iproute}/bin/ip netns del %i";
  };
};
}