{ inputs, pkgs, config, ... }:
let

  inherit (inputs.nixos-hardware.nixosModules)
    common-cpu-intel
    common-gpu-intel
    ;

  interfaces = {
    bottom = "enp1s0";
    top = "enp2s0";
  };
in
{
  imports = [
    common-cpu-intel
    common-gpu-intel
    # ./jellyfin.nix
    ./pxeboot.nix
  ];

  system.stateVersion = "24.11";
  networking.hostName = "radon";

  boot.kernel.sysctl = {
    "net.ipv4.conf.all.forwarding" = true;
    "net.ipv6.conf.all.forwarding" = true;
  };

  users.groups.media.gid = 2000;

  boot.zfs.pools.radon.devNodes = "/dev/disk/by-id/";
  boot.zfs.extraPools = [ "radon" ];

  services.nfs.server.enable = true;
  networking.firewall.allowedTCPPorts = [ 2049 ];

  services.miniflux = {
    enable = true;
    config = {
      BASE_URL = "http://feeds.4kb.net";
      LISTEN_ADDR = "localhost:8080";
    };
    adminCredentialsFile = pkgs.writeText "miniflux-credentials" ''
      ADMIN_USERNAME=admin
      ADMIN_PASSWORD=helloworld
    '';
  };

  services.nginx.virtualHosts."feeds.4kb.net" = {
    locations."/".proxyPass = "http://${config.services.miniflux.config.LISTEN_ADDR}";
  };

  xnet = {
    disk = {
      enable = true;
      device = "/dev/nvme0n1";
    };
    net = {
      join = [ "plaza" ];
      interface = interfaces.bottom;
      sshd.enable = true;
    };
    nginx.enable = true;
    gitServer = {
      enable = true;
      gitweb.enable = true;
    };
  };
}