{ config, pkgs, lib, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
    ];

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.timeout = 0;

  boot.initrd.luks = {
    devices.lvm = {
      device = "/dev/disk/by-uuid/43275d9a-8fe8-4631-bf9c-a95d692b534f";
      bypassWorkqueues = true;
    };
  };

  boot.initrd.network.enable = true;
  boot.initrd.network.ssh = {
    enable = true;
    port = 1022;
    shell = "/bin/cryptsetup-askpass";
    authorizedKeys = config.users.users.clerie.openssh.authorizedKeys.keys;
    hostKeys = [
      "/var/src/secrets/initrd/ssh_host_ed25519_key"
    ];
  };
  boot.initrd.kernelModules = [ "igc" ];
  boot.kernelParams = [ "ip=dhcp" ];

  networking.hostName = "zinc";

  services.wg-clerie = {
    enable = true;
    ipv6s = [ "2a01:4f8:c0c:15f1::8109/128" ];
    ipv4s = [ "10.20.30.109/32" ];
  };

  system.stateVersion = "23.05";
}