{
  pkgs,
  ...
}:
{
  imports = [
    # Machine-specific configurations.
    ./bootloader.nix
    ./firewall.nix
    ./networking.nix
    ./hardware.nix
    ./packages.nix

    # DN42 Services
    ./dn42/default.nix

    # Running Services
    ./services/acme.nix
    ./services/caddy.nix
    ./services/fail2ban.nix
    ./services/prometheus.nix
    ./services/secrets.nix
    ./services/tailscale.nix
  ];
  fileSystems = {
    "/" = {
      fsType = "btrfs";
      device = "/dev/disk/by-path/pci-0000:00:10.0-part3";
    };
  };

  nix.settings.max-jobs = 2;
  nix.settings.cores = 2;

  programs.fish.enable = true;
  programs.fish.interactiveShellInit = ''
    ${pkgs.direnv}/bin/direnv hook fish | source
  '';
  py = {
    profiles.server.enable = true;
    users.default.enable = true;
    programs = {
      fish.enable = true;
      neovim.enable = true;
    };
    services.scrutiny.collector.enable = false;
  };
  security.tpm2.enable = false;
  security.tpm2.abrmd.enable = false;
  services.journald.extraConfig = ''
    SystemMaxUse=500M
  '';
}