{ config, lib, pkgs, ... }:

{
  imports = [ ../secrets/keys ./hostnames.nix ];
  # Initial empty root password for easy login:
  users.users.root.initialHashedPassword = "";
  services.openssh.settings.PermitRootLogin = "prohibit-password";

  services.openssh.enable = true;

  time.timeZone = "America/Los_Angeles";

  nix.gc = {
    automatic = true;
    options = "--delete-older-than 5d";
  };

  swapDevices = [{
    device = "/var/lib/swapfile";
    size = 4 * 1024;
  }];

  environment.systemPackages = [ pkgs.ssh-to-age ];

  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  system.stateVersion = "22.05";
}