# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).

{ flake, config, lib, pkgs, ... }:

{
  imports = with flake.nixosModules; [
      ./hardware-configuration.nix
      base
      jhemono
      # Supporting
      ./buckets.nix
      ./nginx.nix
      ./mailu.nix
      # Services
      ./suite.nix
      # ./bois-ar.nix
      ./forgejo.nix
      ./transmission.nix
      ./lemorillon.nix
      ./syncthing.nix
    ];

  # System packages
  environment.systemPackages = with pkgs; [
    git
  ];

  # OpenSSH
  services.openssh = {
    enable = true;
    settings = {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
    };
  };

  # HTTPS
  security.acme = {
    acceptTerms = true;   
    defaults.email = "julien@hemono.fr"; 
  };

  # Firewall
  networking.firewall.allowedTCPPorts = [ 80 443 ];
  # networking.firewall.allowedUDPPorts = [ ... ];

  system.stateVersion = "23.11";

}