{ pkgs, ... }:

{
  nix.settings.experimental-features = [
    "nix-command"
    "flakes"
  ];

  time.timeZone = "Europe/Moscow";

  i18n.defaultLocale = "ru_RU.UTF-8";
  i18n.supportedLocales = [
    "ru_RU.UTF-8/UTF-8"
    "en_US.UTF-8/UTF-8"
  ];

  users.users.ada = {
    isNormalUser = true;
    shell = pkgs.bashInteractive;
    extraGroups = [
      "wheel"
      "docker"
      "libvirtd"
    ];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIWNsUQmppB6cQccXX1ZaBbFIcmM6RmghsTVbG9TgoZB ada@ada-x1"
    ];
  };

  services.openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
      PermitRootLogin = "no";
      PubkeyAuthentication = true;
    };
  };

  environment.systemPackages = with pkgs; [
    git
    restic
    resticprofile
  ];

  systemd.tmpfiles.rules = [
    "d /opt/services 0755 ada users - -"
    "d /opt/data 0755 ada users - -"
    "d /opt/configs 0755 ada users - -"
    "d /opt/data/postgres 0755 ada users - -"
    "d /opt/data/nextcloud 0755 ada users - -"
    "d /opt/data/gitea 0755 ada users - -"
    "d /opt/data/gitea-runner 0755 ada users - -"
    "d /opt/data/syncthing 0755 ada users - -"
    "d /opt/data/zerotier 0755 ada users - -"
    "d /opt/configs/nextcloud 0755 ada users - -"
    "d /opt/configs/nextcloud/app 0755 ada users - -"
    "d /opt/configs/syncthing 0755 ada users - -"
    "d /opt/samba 0755 ada users - -"
    "d /opt/samba/media 0755 ada users - -"
    "d /opt/samba/documents 0755 ada users - -"
    "d /opt/samba/backups_win 0755 ada users - -"
    "d /mnt/backup 0755 ada users - -"
    "d /mnt/backup/restic 0755 ada users - -"
    "d /mnt/backup/restic/services 0755 ada users - -"
    "d /mnt/backup/restic/samba 0755 ada users - -"
    "d /mnt/backup/devices 0755 ada users - -"
    "d /mnt/backup/devices/proxmox 0755 ada users - -"
    "d /mnt/backup/devices/ada-x1 0755 ada users - -"
    "d /mnt/yandex 0755 ada users - -"
  ];
}