{config, ...}: {
  imports = [
    ./networking.nix # network configuration that just works
    ./hardware.nix

    ../../../system
  ];

  vhack = {
    backup = {
      enable = true;
      privateSshKey = ./secrets/backupssh.age;
      privatePassword = ./secrets/backuppass.age;
      user = "u384702-sub2";
    };
    nginx.enable = true;
    openssh.enable = true;
    postgresql.enable = true;
    users.enable = true;
    persist = {
      enable = true;
      directories = [
        "/var/log"

        # TODO(@bpeetz): Instead of persisting that, encode each uid/gid directly in the
        # config. <2024-12-24>
        "/var/lib/nixos"
      ];
    };
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "server1";
  networking.domain = "vhack.eu";

  system.stateVersion = "22.11";
}