{
  config,
  pkgs,
  lib,
  flakes,
  ...
}:
with lib; {
  imports = [
    flakes.vpsadminos.nixosConfigurations.container
    flakes.home-manager.nixosModules.home-manager
    flakes.impermanence.nixosModule
    ./srv
  ];

  local.sys = {
    baseline.enable = true;
  };

  networking.hostName = "vps";

  users = {
    users.fabian = {
      isNormalUser = true;
      uid = 1000;
      group = "fabian";
      shell = pkgs.zsh;
      extraGroups = ["users" "wheel" "networkmanager" "dialout" "libvirtd"];
      openssh.authorizedKeys.keyFiles = [public_files/pki/fabian.ssh];
    };
    groups.fabian.gid = 1000;
  };

  services.openssh = {
    settings.PasswordAuthentication = false;
  };

  home-manager = {
    useGlobalPkgs = true;
    useUserPackages = true;

    extraSpecialArgs = {inherit flakes;};

    users.fabian = {
      imports = [
        flakes.impermanence.nixosModules.home-manager.impermanence
        "${flakes.self}/home/platforms/fabian@vps"
        "${flakes.self}/home"
      ];
    };
  };

  systemd.extraConfig = ''
    DefaultTimeoutStartSec=900s
  '';

  fileSystems = {
    "/mnt/export2008" = {
      device = "172.16.129.19:/nas/5876";
      fsType = "nfs";
      options = ["nofail" "noatime"];
    };

    "/mnt/export2011" = {
      device = "172.16.129.151:/nas/5876/bepasty";
      fsType = "nfs";
      options = ["nofail" "noatime" "noexec"];
    };
  };

  time.timeZone = "Europe/Amsterdam";
}