{ inputs, config, ... }:
let
  sshKeys = import ../ssh_keys.nix;
  peers = import ../modules/malobeo/peers.nix;
  hosts = import ../hosts.nix {};
in
{
  networking.hostName = "albert";

  sops.defaultSopsFile = ./secrets.yaml;
  sops.secrets.wg_private = {};

  imports =
    [ # Include the results of the hardware scan.
      #./hardware-configuration.nix
      ../modules/sshd.nix
      ../modules/minimal_tools.nix
      ../modules/autoupdate.nix
      inputs.self.nixosModules.malobeo.vpn
      inputs.self.nixosModules.malobeo.initssh
      inputs.self.nixosModules.malobeo.disko
      inputs.self.nixosModules.malobeo.microvm
      inputs.self.nixosModules.malobeo.metrics
      inputs.self.nixosModules.malobeo.users
      inputs.self.nixosModules.malobeo.backup
    ];

  virtualisation.vmVariantWithDisko = {
    virtualisation = {
      memorySize =  4096; 
      cores = 3;
    };
  };
  virtualisation.vmVariant.virtualisation.graphics = false;

  malobeo.metrics = {
    enable = true;
    enablePromtail = true;
    logNginx = true;
    lokiHost = hosts.malobeo.hosts.overwatch.network.address;
  };

  malobeo.autoUpdate = {
    enable = true;
    url = "https://hydra.dynamicdiscord.de";
    project = "malobeo";
    jobset = "infrastructure";
    cacheurl = "https://cache.dynamicdiscord.de";
  }; #Autoupdate auf dem update server??

  nix = {
    settings.experimental-features = [ "nix-command" "flakes" ];
    #always update microvms
    extraOptions = ''
      tarball-ttl = 0
    '';
  };

  malobeo.users = {
    malobeo = true;
    admin = true;
    backup = true;
  };

  malobeo.disks = {
    enable = true;
    hostId = "a3c31011";
    root = {
      disk0 = "disk/by-id/[insert-name-here]";
    };
  };

  systemd.tmpfiles.rules = [ 
    ];

  malobeo.initssh = {
    enable = true;
    authorizedKeys = sshKeys.admins;
    ethernetDrivers = ["r8169"];
  };

  services.malobeo.vpn = {
    enable = true;
    name = "albert";
    privateKeyFile = config.sops.secrets.wg_private.path;
  };

  networking = {
    firewall = {
      allowedTCPPorts = [ 80 443 ];
    };
  };
  nixpkgs.config.allowUnfree = true; 

  services.acpid.enable = true;
  networking.networkmanager.enable = true;
  time.timeZone = "Europe/Berlin";
  system.stateVersion = "23.05"; # Do.. Not.. Change..
}