{config, ...}: {
  imports = [
    ./networking.nix # network configuration that just works
    ./hardware.nix
  ];

  vhack = {
    backup = {
      enable = true;
      privateSshKey = ./secrets/backupssh.age;
      privatePassword = ./secrets/backuppass.age;
      user = "u384702-sub4";
    };
    fail2ban.enable = true;
    mastodon = {
      enable = true;
      domain = "mastodon.vhack.eu";
      enableTLD = false;
      tld = "vhack.eu";
      mailPwFile = ./secrets/mastodon/mail.age;
    };
    matrix = {
      enable = true;
      fqdn = "matrix.vhack.eu";
      url = "vhack.eu";
    };
    miniflux = {
      enable = true;
      domain = "miniflux.foss-syndicate.org";
      extraDomains = [
        "rss.foss-syndicate.org"
        "rss.vhack.eu"
        "miniflux.vhack.eu"
      ];
      adminCredentialsFile = ./secrets/miniflux/admin.age;
    };
    murmur = {
      enable = true;
      host = "mumble.vhack.eu";
      name = "vhack";
      url = "vhack.eu";
    };
    nixconfig.enable = true;
    openssh.enable = true;
    peertube = {
      enable = true;
      peertubeGeneral = ./secrets/peertube/general.age;
      smtpPasswordFile = ./secrets/peertube/smtp.age;
    };
    persist = {
      enable = true;
      directories = [
        "/var/log"
      ];
    };
    postgresql.enable = true;
    rust-motd.enable = true;
    users.enable = true;
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "server3";
  networking.domain = "vhack.eu";

  system.stateVersion = "24.11";
}