{ inputs, pkgs, ... }:
{
  imports = [
    ../common/default.nix
    ./hardware.nix
    ./ports.nix

    ./caddy
    ./services

    inputs.tranquil.nixosModules.tranquil-pds
  ];

  nix.settings.trusted-users = [
    "root"
    "@wheel"
    "apr"
  ];

  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
    kernelPackages = pkgs.linuxPackages_latest;
  };

  networking = {
    hostName = "ivy";
    networkmanager.enable = true;

    firewall = {
      allowedTCPPorts = [
        22
        80
        443
        11434
      ];
      allowedUDPPorts = [ ];
      enable = true;
    };
  };
  security.sudo.wheelNeedsPassword = false;

  users.users.apr.uid = 1000;
  system.stateVersion = "25.11";
}