nixos-config/hosts/enry/configuration.nix

{
  pkgs,
  lib,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    ./hardware-configuration.nix
    ../../common/base.nix

    ../../common/hardware/raspberry-pi.nix

    ../../modules/nixos/vedirect-reader.nix

    ../../common/components/enry.nix
  ];

  networking = {
    hostName = "enry";

    firewall = {
      allowedTCPPorts = [
        2342
        8080 # ?
        9000 
        9002
      ];
    };
  };

  nix.settings.trusted-users = ["root" "@wheel"]; # TODO

  users.users.tasia = {
    isNormalUser = true;
    description = "Tasia";
    extraGroups = ["networkmanager" "wheel" "dialout"];
    initialPassword = "correcthorsebatterystaple";
    openssh.authorizedKeys.keys = [
      sshKeys.tasia.yaseen
    ];
  };

  environment.systemPackages = with pkgs; [
    nodejs
    vedirect-reader
  ];

  services.prometheus.enable = true;
  services.vedirect-reader.enable = true;

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.11";
}