{ config, pkgs, ... }:

{
  networking.hostName = "crossbox";
  system.stateVersion = "25.11";
  networking.firewall.allowedTCPPorts = [ 22 ];
  services.pulseaudio.enable = false;

  hardware.graphics = {
    enable = true;
    extraPackages = with pkgs; [
      rocmPackages.clr.icd # ROCm OpenCL runtime
      rocmPackages.clr
      rocmPackages.rocminfo
      rocmPackages.rocm-runtime
    ];
  };

  # List services that you want to enable:
  services.openssh = {
    enable = true;
    settings = {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
    };
  };

  # Disable automatic suspend.
  # Otherwise SSH tunnels and HDMI signals break.
  services.logind = {
    settings = {
      Login = {
        HandleLidSwitch = "ignore";
	HandleHibernateKey = "ignore";
	HandleSuspendKey = "ignore";
	HandlePowerKey = "ignore";
      };
    };
  };

  virtualisation.docker = {
    enable = true;
    autoPrune = {
      enable = true;
      dates = "weekly";
    };
    rootless = {
      enable = true;
      setSocketVariable = true;
    };
  };
}