{ config, pkgs, ... }:

{
  imports = [
    ./hardware.nix
    ./disko.nix
    ../../modules/common.nix
    ../../modules/sops.nix
    ../../modules/caddy.nix
    ../../modules/adguard.nix
    ../../modules/miniflux.nix
    ../../modules/actual.nix
    ../../modules/cgit.nix
  ];

  networking.hostName = "eurovm";

  # Admin user - authorized SSH keys for both Einstein and Galileo devices
  users.users.admin = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwAgL0o4NVonSG07Xu4Eai84ns4AjoZj2V7dGC9nXit karanjayachandra@Einstein.local"
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH+qnLTnorv+I2rSSfGjNiCuX/W5AxoNgAdu+cTOyKzW Galileo"
    ];
  };

  # Allow admin to use sudo
  security.sudo.wheelNeedsPassword = false;

  system.stateVersion = "24.11";
}