{ config, pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    # ./nginx.nix  # TODO
  ];

  networking.hostName = "anvil";
  system.stateVersion = "24.11";
  networking.firewall.allowedTCPPorts = [ 8384 ];
  services.pulseaudio.enable = false;

  boot.initrd.luks.devices."luks-1f261d60-dfb4-4f63-9c77-f331a007108b".device = "/dev/disk/by-uuid/1f261d60-dfb4-4f63-9c77-f331a007108b";

  services.openssh = {
    enable = true;
    settings = {
      PermitRootLogin = "no";
      PasswordAuthentication = true;
    };
  };

}