nixos/roles/networkmanager.nix

{
  networking.networkmanager = {
    enable = true;
    unmanaged = [ "interface-name:ve-*" ];
  };
}