{
  imports = [
    ./disko.nix
    ./hardware-configuration.nix
  ];

  networking = {
    useNetworkd = true;
    useDHCP = false;
    firewall.enable = true;
    wireguard.interfaces.wg0 = {
      ips = [ "10.10.0.40/24" ];
      peers = [
        {
          publicKey = "NjMYaUZO/iPRM/J46qyPPuWYg5oSeAUxjocMs/hYTXs=";
          endpoint = "178.254.8.35:51820";
          allowedIPs = [ "10.10.0.0/24" ];
          persistentKeepalive = 25;
        }
      ];
    };
  };

  systemd.network = {
    enable = true;
    networks."10-ethernet" = {
      matchConfig.Name = "eno1";
      networkConfig = {
        Address = "192.168.2.40/24";
        Gateway = "192.168.2.1";
        DNS = [
          "192.168.2.2"
          "1.1.1.1"
        ];
        DHCP = "no";
      };
    };
  };

  boot.loader = {
    systemd-boot = {
      enable = true;
      configurationLimit = 10;
      editor = false;
    };
    efi.canTouchEfiVariables = true;
  };

  services = {
    desktopManager.plasma6.enable = false;
    displayManager.sddm = {
      enable = false;
      wayland.enable = true;
    };
  };

  environment.pathsToLink = [
    "/share/applications"
    "/share/xdg-desktop-portal"
  ];

  system.stateVersion = "26.11";

  virtualisation.docker.enable = true;
  users.users.phil.extraGroups = [ "docker" ];

  programs.fuse.userAllowOther = true;
}