{ pkgs, ... }:

{
  imports = [
    ../modules/base.nix
    ../modules/docker.nix
    ../modules/firewall-mini-pc.nix
    ./mini-pc-hardware-configuration.nix
  ];

  networking = {
    hostName = "mini-pc";
    useDHCP = false;
    defaultGateway = "192.168.1.1";
    nameservers = [
      "192.168.1.1"
      "1.1.1.1"
    ];
  };

  systemd.network = {
    enable = true;
    networks."10-lan" = {
      matchConfig.Name = "en*";
      networkConfig = {
        Address = "192.168.1.10/24";
        Gateway = "192.168.1.1";
        DNS = [
          "192.168.1.1"
          "1.1.1.1"
        ];
      };
    };
  };

  services.resolved.enable = false;

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  virtualisation.libvirtd = {
    enable = true;
    qemu = {
      package = pkgs.qemu_kvm;
    };
  };

  services.zerotierone = {
    enable = true;
    joinNetworks = [
      "743993800fa5a34c"
    ];
  };

  systemd.tmpfiles.rules = [
    "d /opt/data/adguard 0755 ada users - -"
    "d /opt/data/adguard/work 0755 ada users - -"
    "d /opt/data/caddy 0755 ada users - -"
    "d /opt/data/gitea-runner 0755 ada users - -"
    "d /opt/data/uptime-kuma 0755 ada users - -"
    "d /opt/data/vaultwarden 0755 ada users - -"
    "d /opt/data/zerotier 0755 ada users - -"
    "d /opt/configs/adguard 0755 ada users - -"
    "d /opt/configs/caddy 0755 ada users - -"
    "d /opt/configs/caddy/lego 0755 ada users - -"
  ];

  system.stateVersion = "25.11";
}