{pkgs, ...}: {
  imports = [
    ./hardware-configuration.nix
  ];

  boot = {
    # kernel is defined in `groups/servers/default.nix`
    kernelParams = ["console=ttyS0,19200n8"];

    loader = {
      timeout = 10;
      grub = {
        enable = true;
        forceInstall = true;
        device = "nodev";
        extraConfig = ''
          serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
          terminal_input serial;
          terminal_output serial
        '';
      };
    };
  };

  networking.hostName = "delphinus";

  networking = {
    networkmanager.enable = true;
    usePredictableInterfaceNames = false;
    useDHCP = false;

    interfaces.eth0 = {
      useDHCP = true;

      # linode expects ipv6 privacy extensions to be disabled:
      # https://www.linode.com/docs/guides/manual-network-configuration/#static-vs-dynamic-addressing
      tempAddress = "disabled";
    };

    nftables.enable = true;

    firewall = {
      enable = true;
      allowedTCPPorts = [
        4070
      ];
      allowedUDPPorts = [];
    };
  };

  time.timeZone = "Europe/Amsterdam";

  i18n.defaultLocale = "en_US.UTF-8";
  console = {
    font = "Lat2-Terminus16";
    keyMap = "us";
  };

  services = {
    openssh = {
      enable = true;

      ports = [4070];
      settings = {
        PasswordAuthentication = false;
        PermitRootLogin = "no";
        AllowUsers = ["foxora"];
        UseDns = false; # enables rDNS lookup
        X11Forwarding = false;
      };
    };
  };

  users.users.foxora = {
    isNormalUser = true;
    extraGroups = ["wheel"];

    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGwai/gXJOJZQujpk0BSwdjSe2as3pT567bYhzjaQ4M aurora@nixarawrui"
    ];

    packages = with pkgs; [];
  };

  programs = {
    nh = {
      enable = true;
      clean.enable = true;
      clean.extraArgs = "--keep-since 7d --keep 3";
    };
  };

  environment = {
    systemPackages = with pkgs; [
      neovim
      git
      wget
    ];

    variables = {
      EDITOR = "nvim";
    };
  };

  system.stateVersion = "25.11";
}