{ config, pkgs, ... }:

{
  imports =
    [
      ./hardware-configuration.nix

      ./restic-server.nix
      ./wg-b-palladium.nix
    ];

  boot.kernelParams = [ "console=ttyS0,115200n8" ];

  boot.loader.grub.enable = true;
  boot.loader.grub.device = "nodev";
  boot.loader.grub.efiSupport = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.grub.extraConfig = "
    serial --speed=115200 --unit=0 --word=8 --parity=no --stop=1
    terminal_input console serial
    terminal_output gfxterm serial
  ";

  boot.initrd.luks = {
    devices.lvm = {
      device = "/dev/disk/by-uuid/f5597381-b59b-4f19-94b7-fd69aac43d6f";
      bypassWorkqueues = true;
    };
    devices.crypt-storage-palladium = {
      device = "/dev/disk/by-uuid/c54396c0-b5d3-4e61-9ef7-483fa2b4a56d";
    };
  };

  boot.swraid.enable = true;

  systemd.network.networks."10-wan" = {
    matchConfig.Name = "enp3s0";
    address = [
      "fd00:152:152:4::11/64"
    ];
    networkConfig.DHCP = true;
    linkConfig.RequiredForOnline = "routable";
    ipv6AcceptRAConfig.DHCPv6Client = "no";
  };

  # Keeping the harddrives quiet
  services.udev.extraRules = ''
    KERNEL=="sd?[0-9]", ENV{ID_MODEL}=="ST1000DM003-1SB102", ACTION=="add", RUN+="${pkgs.hdparm}/sbin/hdparm -S 24 /dev/%k"
  '';

  profiles.clerie.wg-clerie = {
    enable = true;
    ipv6s = [ "2a01:4f8:c0c:15f1::8103/128" ];
    ipv4s = [ "10.20.30.103/32" ];
  };

  clerie.monitoring = {
    enable = true;
    id = "206";
    pubkey = "2Q8mO4Y09Oi9CCfUUvWpZ8yIQezwtE94tz6ZbA0EDwE=";
  };

  system.stateVersion = "25.05";

}