nixos-config/hosts/phoenix/configuration.nix

{
  pkgs,
  lib,
  inputs,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    ./hardware-configuration.nix
    ../../common/base.nix

    ../../common/locales/en.nix
    ../../common/locales/fr-keymap.nix

    ../../common/hardware/intel-cpu.nix
    ../../common/hardware/ssd.nix
    ../../common/hardware/btrfs.nix

    ../../common/services/syncthing.nix

    ../../home/tasia-but-old-username.nix

    inputs.agenix.nixosModules.default
    ../../common/components/wifi-secrets.nix
  ];

  networking = {
    hostName = "phoenix";

    firewall.allowedTCPPorts = [
      8384 # syncthing web UI
      # 12345 # tildefriends
      # 13378 # audiobookshelf
    ];
    firewall.allowedUDPPorts = [
      12345 # tildefriends
    ];
  };

  users.users.user.openssh.authorizedKeys.keys = [
    sshKeys.tasia.cave
  ];

  services.btrfs.autoScrub.fileSystems = lib.mkForce ["/" "/data"];

  # services.vedirect-reader.enable = true;

  virtualisation.docker.enable = true;

  services.syncthing = {
    dataDir = lib.mkForce "/home/user";
    configDir = lib.mkForce "/data/sync/configuration/";
    guiAddress = "0.0.0.0:8384";
  };

  environment.systemPackages = with pkgs; [
    #
  ];

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.05";
}