{ pkgs, lib, ... }:
{
  imports = [
    ./users/chris.nix
    ./services/postgres.nix
    ./services/synapse.nix
  ];
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader.grub = {
      enable = true;
      device = "/dev/vda";
      efiSupport = false;
    };
  };
  networking = {
    hostName = "chat-allthe-gay";
    wireless.enable = false;
    nameservers = lib.mkForce [
      "1.1.1.1"
      "1.0.0.1"
      "8.8.8.8"
      "8.8.4.4"
    ];
    firewall.enable = lib.mkForce true;
    firewall.allowedTCPPorts = [ 8008 ];
  };
  systemd.network = {
    enable = true;
    networks.ens18 = {
      name = "ens18";
      DHCP = "no";
      routes = [
        { Gateway = "172.30.0.1"; }
      ];
      address = [ "172.30.0.50/24" ];
    };
  };

  services.irqbalance.enable = true;
  environment.memoryAllocator.provider = "jemalloc";
  nix.nrBuildUsers = 128;

  environment.systemPackages = with pkgs; [
    neofetch
    lnav
    git
    lsd
    duf
    btop
    kitty.terminfo
    jq
    nano
    cloud-utils
    dig
    pv
    vimPlugins.vim-nix
  ];
  nix = {
    settings = {
      experimental-features = [
        "nix-command"
        "flakes"
      ];
    };
  };
  security = {
    polkit.enable = true;
    sudo.wheelNeedsPassword = false;
  };

  services.openssh = {
    enable = true;
  };

  system.stateVersion = "26.11"; # Emma [it/its] - NEVER CHANGE THIS
}