{ config, lib, ... }:

{
  config = lib.mkIf config.networking.networkmanager.enable {
    environment.etc."NetworkManager/system-connections".source =
      "/persist/safe/etc/NetworkManager/system-connections";

    fileSystems."/var/lib/NetworkManager" = {
      device = "/persist/safe/var/lib/NetworkManager";
      options = [ "bind" ];
    };

    systemd.tmpfiles.rules = [
      "d /persist/safe/etc/NetworkManager/system-connections 0700"
      "d /persist/safe/var/lib/NetworkManager 0700"
    ];
  };
}