{ pkgs, lib, config, ... }:

{
  imports = [ ./hardware.nix ];

  config = {
    networking.hostId = "3cc1a4b2";

    time.timeZone = "Europe/Brussels";

    services.openvpn.servers.tryhackme = {
      autoStart = false;
      config = "config ${config.age.secrets."files/services/openvpn/tryhackme".path}";
    };

    age.secrets."files/services/openvpn/tryhackme".file = ../../secrets/files/services/openvpn/tryhackme.age;

    # Machine-specific module settings
    chvp = {
      stateVersion = "20.09";
      base = {
        bluetooth.enable = true;
        network.mobile = {
          enable = true;
          wireless-interface = "wlp0s20f3";
          wired-interfaces = {
            "enp0s31f6" = { };
          };
        };
        zfs = {
          encrypted = true;
          backups = [
            {
              path = "rpool/safe/data";
              remotePath = "zdata/recv/kholinar/safe/data";
              fast = true;
              location = "lasting-integrity";
            }
          ];
          rootDataset = "rpool/local/root";
        };
      };
      development = {
        enable = true;
        android.enable = true;
      };
      games.enable = true;
      graphical.enable = true;
      programs = {
        calibre.enable = false;
        deluge.enable = true;
        eid.enable = true;
        element.enable = true;
        hledger.enable = true;
        obs.enable = true;
      };
      # It's a pandemic.
      work.enable = true;
    };
  };
}