# vim: tabstop=2 shiftwidth=2 expandtab
let
  base-domain = "005540.xyz";
in
{ pkgs, docspell, ... }: {
  imports = [
    ./hardware-configuration.nix
    ./firewall.nix
    ./fail2ban.nix
    ./borgbackup.nix

    ./ftp.nix

    (import ./acme.nix { inherit base-domain; })
    (import ./nginx.nix { inherit base-domain; })
    ./postgresql.nix

    (import ./sourcehut.nix { inherit base-domain; })

    (import ./docspell.nix { inherit base-domain docspell; })
    (import ./teedy.nix { inherit base-domain; })
    (import ./paperless.nix { inherit base-domain; })

    ./userprogs.nix
  ];

  environment.sessionVariables = {
    TERM = "xterm-256color";
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "quasar";
  networking.domain = "";
  services.openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
    };
  };
  users.users.root.openssh.authorizedKeys.keys = [
    ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKQNIDqvhcfLKIDJybVI0o32CSDZpBXxjRxXj6OVQ93E khais@nixos''
    ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9C7ssXUVVMKOxfJOumkP3dUWVtC3cBPlCIl6ZZc8ug khais@void''
  ];
  users.groups.paperless-upload = {};
  users.users.paperless = {
    extraGroups = [ "paperless-upload" ];
  };
  users.users.paperless-upload = {
    isNormalUser = true;
    homeMode = "770";
    group = "paperless";
  };
  system.stateVersion = "23.11";
}