{ pkgs, lib, config, ... }:
{
  imports = [
    # ../networking/gitns.nix
    ../networking/yggdrasil.nix
    ../modules/alfis.nix
    ../profiles/oh-my-zsh.nix
    ../profiles/alias.nix
    ../profiles/plik.nix
    ../profiles/warez.nix
    ../profiles/gemini.nix
    # ../profiles/home-manager.nix
    ../profiles/recovery.nix
  ];
  networking.hostName = "nixos";
  networking.domain = "local";

  services.nginx.virtualHosts."warez.${config.networking.fqdn}" = lib.mkForce {
    enableACME = false;
    forceSSL = false;
  };

  services.nginx.virtualHosts."plik.${config.networking.fqdn}" = lib.mkForce {
    enableACME = false;
    forceSSL = false;
  };

  # networking.tcpcrypt.enable = true;
  # users.users.tcpcryptd.group = "tcpcryptd";
  # users.groups.tcpcryptd = {};

  networking.firewall.allowedTCPPorts = [ 80 ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  system.stateVersion = "21.11";
}