{ pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix
  ];

  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };

  beatific.hostName = "backyard";

  # Enable networking
  networking.networkmanager.enable = true;
  users.users.tvb.extraGroups = [ "networkmanager" ];

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [
      80  # http
      443 # https
      8080 # nginx bind backyard.lan
    ];
  };

  networking.extraHosts = ''
    10.22.20.1  empyrean.vpn
    10.22.20.2  catacomb.vpn
    10.22.20.8  backyard.vpn
    10.22.20.8  git.backyard.vpn
  '';

  services.nginx.enable = true;
  services.nginx.virtualHosts = {
    "git.backyard.vpn" = {
      #listen = [ { addr = "git.backyard.vpn"; port = 80; } ];
      locations."/".return = "200 \"this is the git, yes\"";
    };
    "default" = {
      default = true;
      locations."/".return = "444";
    };
  };

  # This value governs how some stateful data, like databases, are handled
  # across different versions of NixOS. This should not be changed to a new
  # release unless the sysadmin has determined that no services would be
  # adversely affected by changing this.
  system.stateVersion = "23.05";

}