nixos-config/hosts/enry/configuration.nix

{
  pkgs,
  lib,
  inputs,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    ./hardware-configuration.nix
    ../../common/base.nix

    ../../common/hardware/raspberry-pi.nix

    ../../common/components/enry.nix

    inputs.agenix.nixosModules.default
    ../../common/components/wifi-secrets.nix

    inputs.vedirect-reader.nixosModules.aarch64-linux.default
  ];

  networking = {
    hostName = "enry";

    firewall = {
      allowedTCPPorts = [
        2342
        8080 # ?
        9000
        9002
      ];
    };
  };

  nix.settings.trusted-users = ["root" "@wheel"]; # TODO

  users.users.tasia = {
    isNormalUser = true;
    description = "Tasia";
    extraGroups = ["networkmanager" "wheel" "dialout"];
    initialPassword = "correcthorsebatterystaple";
    openssh.authorizedKeys.keys = [
      sshKeys.tasia.cave
    ];
  };

  environment.systemPackages = with pkgs; [
    nodejs
    inputs.vedirect-reader.packages.aarch64-linux.default
  ];

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.11";
}