{ ... }:
{
  imports = [
    ./hardware.nix
    ./webservices.nix
    ./bskyannouncements.nix
  ];
  system.stateVersion = "24.11";
  system.timezone = "America/Los_Angeles";
  system.users.bigWheels = [ "pan" ];

  sops-nix = {
    enable = true;
    keyFile = "/etc/sops/age/keys.txt";
    sopsFile = ./secrets.yaml;
    secrets = {
      pdsEnv = {};
      forgejoPassword = {
        owner = "forgejo";
      };
    };
  };

  postgres.enable = true;

  shell.enabledShells = [ "fish" ];
  shell.defaultShell = "fish";

  tailscale.enable = true;
  sshd.enable = true;
}