{ config, ... }:
{
  imports = [
    ./hardware-configuration.nix # Include the results of the hardware scan.
    ./mailserver.nix
    ./nginx.nix
    ./git.nix
  ];

  boot.loader.grub.enable = true;
  boot.loader.grub.device = "/dev/vda";

  wireguard = {
    enable = true;
    # pub: gq0/fX4EF/3jUNJSW5C3ythZjMVAWYqQdAVRw1eUC1Y=
    privateKeyFile = config.sops.secrets."wireguard/crayon".path;
    externalInterface = "enp1s0";
  };

  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you
  # should.
  system.stateVersion = "25.05"; # Did you read the comment?
}