{ config, pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ./system.nix
    ./services/caddy.nix
    ./services/immich.nix
    ./services/vaultwarden.nix
    ./services/forgejo.nix
  ];

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [ 22 80 443 ];
  };

  systemd.tmpfiles.rules = [
    "d /var/lib/data 0775 daniel users -"
  ];

  environment.systemPackages = with pkgs; [
    neovim
    git
  ];

  environment.shellAliases = {
    rebuild = "sudo nixos-rebuild switch --flake ~/server-config#server";
    rebuild-test = "sudo nixos-rebuild test --flake ~/server-config#server";
    rebuild-dry = "nixos-rebuild dry-run --flake ~/server-config#server";
  };

}