{ config, ... }:
{
  imports = [
    ./hardware-configuration.nix # Include the results of the hardware scan.
    ./mailserver.nix
    ./nginx.nix
    ./git.nix
  ];

  boot.loader.grub.enable = true;
  boot.loader.grub.device = "/dev/vda";

  wireguard = {
    enable = true;
    # pub: gq0/fX4EF/3jUNJSW5C3ythZjMVAWYqQdAVRw1eUC1Y=
    privateKeyFile = config.sops.secrets."wireguard/crayon".path;
    externalInterface = "enp1s0";
  };
}