{
  pkgs,
  inputs,
  ...
}:
{
  imports = [
    inputs.impermanence.nixosModules.impermanence
    inputs.disko.nixosModules.disko
    ./headscale.nix
    ./caddy.nix
    ./disko.nix
  ];

  # disable local builds of anything, machine doesn't have enough RAM
  nix.settings.max-jobs = 0;

  services.btrfs.autoScrub = {
    enable = true;
    interval = "weekly";
    fileSystems = [ "/" ];
  };

  services.resolved.enable = true;
  networking = {
    networkmanager = {
      enable = true;
      dns = "systemd-resolved";
    };
    useDHCP = false;
    nameservers = [
      "1.1.1.1"
      "1.0.0.1"
    ];
    defaultGateway = {
      address = "202.61.248.1";
      interface = "ens3";
    };
    interfaces.ens3 = {
      useDHCP = false;
      ipv4.addresses = [
        {
          address = "202.61.250.164";
          prefixLength = 22;
        }
      ];
      ipv6.addresses = [
        {
          # 2a03:4000:54:b01:78a4:47ff:fea1:3e43/64
          address = "2a03:4000:54:b01::";
          prefixLength = 64;
        }
      ];
    };
  };
  time.timeZone = "Europe/Berlin";

  security.sudo.extraConfig = ''
    Defaults lecture = never
  '';

  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };

  users = {
    users.isabella = {
      isNormalUser = true;
      description = "Isabella Morgana Bastaja";
      extraGroups = [ "wheel" ];
      initialPassword = "isabella";
      openssh.authorizedKeys.keys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4aG8NI25TgjcDevjsY/Y6d3iYsQxSEtIpsqprMHmad osiris@underworld"
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPUcWGKF3uIf/gqbo1/lxb8XLoi67Bc2tVi1Bd/Ddhoz isabella@wonderland"
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvtzeVHgenfSUrpZeyZBoBTzN96rdYMy3KEJoRXja0O isabella@nyaan"
      ];
    };
    mutableUsers = false;
  };
  console.keyMap = "us";

  services.openssh = {
    enable = true;
    ports = [ 22 ];
    openFirewall = true;
    settings = {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
      AllowUsers = [
        "isabella"
      ];
    };
  };

  environment = {
    systemPackages = [
      pkgs.git
      pkgs.helix
    ];
  };

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "26.05"; # Did you read the comment?
}