{ config, pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ./services/nginx.nix
    ./services/akkoma.nix
    ./services/cgit.nix
    ./services/blog.nix
    ./services/mail.nix
    ./services/trainspotter.nix
    ./services/element.nix
    ./services/ntfy.nix
    ./services/murmur.nix
    ./services/monit.nix
  ];
  
  # Use the GRUB 2 boot loader.
  boot.loader.grub.enable = true;
  boot.loader.grub.devices = [ "/dev/sda" ];

  sops.defaultSopsFile = ../secrets/flora.yaml;
  # This will automatically import SSH keys as age keys
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  networking = {
    hostName = "flora";
    
    enableIPv6 = true;
    defaultGateway6 = {
      address = "fe80::1";
      interface = "ens3";
    };
    
    interfaces.ens3.ipv6.addresses = [ {
      address = "2a01:4f9:c010:df15::1";
      prefixLength = 64;
    } ]; 
    
    useDHCP = false;
    interfaces.ens3.useDHCP = true;
    interfaces.ens10.useDHCP = true;

    firewall.logRefusedConnections = false;
  };


  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.09"; # Did you read the comment?

}