{ impermanence, pkgs, ... }:
{

  imports = [
    ./hardware.nix
    ../../users/christian
  ];

  services = {
    openssh = {
      enable = true;
      ports = [ 2322 2323 2324 ];
    };
  };

  programs.mosh.enable = true;

  users.mutableUsers = false;
  users.users = {
    christian = {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
    };
  };

  security = {
    sudo = {
      wheelNeedsPassword = false;
      extraConfig = ''
        Defaults lecture = never
      '';
    };
  };

  nix.settings = {
    trusted-users = [ "@wheel" ];
    trusted-public-keys = [
      "labyrinth-1:GCR2h5k9WFvome2mrFRBtiWw7sAn+pYZwXRwAj9W0b0="
    ];
  };

  environment.systemPackages = with pkgs; [
    config-archive
  ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  system.stateVersion = "23.05";
}