{ config, pkgs, ... }:

{
  imports = [ ./hardware-configuration.nix ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  security.sudo.wheelNeedsPassword = false;

  networking.hostName = "k8s-server";
  networking.useDHCP = false;
  networking.interfaces.ens18.ipv4.addresses = [
    {
      address = "10.202.82.7";
      prefixLength = 24;
    }
  ];
  networking.defaultGateway = "10.202.82.1";
  networking.nameservers = [ "10.202.82.3" "10.202.82.4" ];

  time.timeZone = "Europe/Berlin";

  services.openssh.enable = true;

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [ 22 6443 ];
    allowedUDPPorts = [ 8472 ];
  };

  users.users.danlin = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    initialPassword = "changeme";
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAzAW0DTpdQJaQOWDC3YJCmPc/veBQ0R3e1q9nOlWgxC danlin@MacBook-Pro-von-Daniel.fritz.box"
    ];
  };

  users.users.root.initialPassword = "root";

  environment.systemPackages = with pkgs; [
    vim
    htop
  ];

  system.stateVersion = "25.05";
}