{ ... }:

{
  imports = [
    ./hardware-configuration.nix
  ];

  boot.loader.grub.devices = [ "/dev/sda" ];

  networking.hostName = "apprentix";

  crans = {
    enable = true;

    networking = {
      id = 150;
      srvNat.enable = true;
    };

    resticClient.when = "01:23";

    homeNounou.enable = false;

    users.root.passwordFile = ../../../secrets/apprentix/root.age;
  };

  security.sudo.extraRules = [
    {
      groups = [ "_user" ];
      commands = [ "ALL" ];
    }
  ];

  networking.interfaces.ens-clubs = {
    name = "ens20";
    ipv4.addresses = [
      {
        address = "172.16.54.1";
        prefixLength = 24;
      }
    ];
    ipv6.addresses = [
      {
        address = "fd00::10:0:ff:fe00:0154";
        prefixLength = 64;
      }
    ];
  };

  system.stateVersion = "24.11";
}