{ config, pkgs, ... }:

{
  system.autoUpgrade.enable = true;
  system.autoUpgrade.allowReboot = false;

  boot.loader.timeout = 2;
  boot.tmpOnTmpfs = true;

  i18n = {
    consoleFont = "Lat2-Terminus16";
    consoleKeyMap = "sg-latin1";
    defaultLocale = "en_US.UTF-8";
  };
  
  environment.systemPackages = with pkgs; [
    wget curl vim tmux git ncat bind ack
    fwupd pciutils dmidecode smartmontools parted
    borgbckup
  ];

  services.fwupd.enable = true;


  # Networking
  networking.firewall = {
    allowPing = true;
    allowedTCPPorts = [ 22 ];
  };

  # Enable the OpenSSH daemon.
  services.openssh = {
    enable = true;
    passwordAuthentication = false;
  };

  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIPF8ZV7vhpbVvLxiKq8ANVusNUHMbtii5MuvjxCbVz7vSNVPo9OOLvYyDqhbRAWMTdQeGZVAaALBufKKmprDTRFMpnA7Ut4TFrdz/5DTaR2KEjJ7P75moH+0xooR/GsbzFGsNBSQSXK3u1igndPYEC/PqCHN++32kDo2wLqTB4VLrEovU3iq8BMckn329Bu1fGbXKTgDpEvUEEwFO2brQZLMmzILGF/v4B9ImEGtinAUNgDSfEpgPN23sdWQH9rwEClGv95JmWNf05tuVomhZzOBtCFoAno3XB1nj16avjsqJ3aGFY2CCcfsNrwKzhIotmm82bcI4BJuJIVRIKbZ1 cardno:000603507108"
  ];

  nix.gc = {
    automatic = true;
    dates = "weekly";
    options = "--delete-older-than 30d";
  };

  environment.etc = {
    gitconfig.source = ./base/etc/gitconfig;
    vimrc.source = ./base/etc/vimrc;
  };
}