nixos-config/hosts/phoenix/configuration.nix

{
  pkgs,
  lib,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    ./hardware-configuration.nix
    ../../common/base.nix
    ../../common/full-install.nix
    ../../common/tasia-packages.nix

    ../../common/locales/en.nix
    ../../common/locales/fr-keymap.nix

    ../../common/hardware/intel-cpu.nix
    ../../common/hardware/amd-gpu.nix
    ../../common/hardware/ssd.nix
    ../../common/hardware/btrfs.nix
    ../../common/hardware/latest-kernel.nix

    ../../common/de/plasma6.nix

    ../../common/programs/steam.nix
    ../../common/services/adguardhome.nix
    ../../common/services/syncthing.nix

    ../../modules/nixos/vedirect-reader.nix
  ];

  networking = {
    hostName = "phoenix";

    firewall = {
      enable = true;
      allowedTCPPorts = [
        8080 # ?
        12345 # tildefriends
        13378 # audiobookshelf
      ];
      allowedUDPPorts = [
        8080 # ?
      ];
    };
  };

  users.users.user = {
    isNormalUser = true;
    description = "User";
    extraGroups = ["networkmanager" "wheel" "syncthing"];
    initialPassword = "correcthorsebatterystaple";
    openssh.authorizedKeys.keys = [
      sshKeys.new-new-phoenix.tasia
    ];
  };

  services.btrfs.autoScrub.fileSystems = lb.mkForce ["/" "/data"];

  # services.vedirect-reader.enable = true;

  virtualisation.docker.enable = true;
  services.flatpak.enable = false;

  services.syncthing = {
    dataDir = lib.mkForce "/home/user";
    configDir = lib.mkForce "/data/sync/configuration/";
  };

  environment.systemPackages = with pkgs; [
    #
  ];

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.05";
}