{
  config,
  lib,
  pkgs,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
  ];

  networking.hostName = "delphinus";

  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader = {
      timeout = 10;
      grub = {
        enable = true;
        forceInstall = true;
        device = "nodev";
        extraConfig = ''
          serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
          terminal_input serial;
          terminal_output serial
        '';
      };
    };
  };

  networking = {
    networkmanager.enable = true;
    useDHCP = false;
    usePredictableInterfaceNames = false;
    nftables.enable = true;

    firewall = {
      enable = true;
      allowedTCPPorts = [6767];
      allowedUDPPorts = [];
    };
  };

  time.timeZone = "Europe/Amsterdam";

  i18n.defaultLocale = "en_US.UTF-8";
  console = {
    font = "Lat2-Terminus16";
    keyMap = "us";
  };

  users.users.fox = {
    isNormalUser = true;
    extraGroups = ["wheel"];
    packages = with pkgs; [
      tree
    ];

    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGwai/gXJOJZQujpk0BSwdjSe2as3pT567bYhzjaQ4M aurora@nixarawrui"
    ];
  };

  services = {
    openssh = {
      enable = true;

      ports = [6767];
      settings = {
        PasswordAuthentication = false;
        PermitRootLogin = "no";
        AllowUsers = ["fox"];
        UseDns = false; # disable rDNS lookup
        X11Forwarding = false;
      };
    };
  };

  environment.systemPackages = with pkgs; [
    neovim
    git
    wget
  ];

  system.stateVersion = "25.11";
}