{ lib, config, pkgs, ... }: {
  imports = [

    # ../../system/all/nginx.nix
    ../../system/all/defaults.nix

    ../../components
    ../../modules

    ./hetzner.nix

    ./borg.nix
    ./codimd.nix
    ./gitea.nix
    ./nextcloud.nix
    ./packages.nix
    ./taskserver.nix
    ./vaultwarden.nix
    ./nginx.nix
    ./nginx-wkd.nix

    ./network-tinc.nix
    ./network-wireguard.nix

    ./media-share.nix
    ./media-jellyfin.nix
    ./media-syncthing.nix
    ./media-transmission.nix
    ./media-transmission2.nix
    ./media-arr.nix

    ./social-jitsi.nix

    # matrix
    ./terranix-dendrite.nix

    # logging
    ./loki.nix
    ./loki-promtail.nix
    ./prometheus.nix
    ./grafana.nix
    ./telegraf.nix

    ./sync-opentracker.nix
    ./sync-torrent.nix

    ./cache.nix
  ];




  components.terminal.enable = true;
  components.mainUser.enable = true;
  components.gui.enable = false;

  components.network.enable = true;
  components.network.wifi.enable = false;

  # 2 hours = 2 * 60 * 60 = 7200 seconds
  #services.netdata.config.global.history = 7200;
  # 4 hours = 4 * 60 * 60 = 14440 seconds
  services.netdata.config.global.history = 14440;
  # 24 hours = 24 * 60 * 60 = 86400 seconds
  #services.netdata.config.global.history = 86400;

  services.sshguard.enable = true;

  security.acme.acceptTerms = true;
  security.acme.defaults.email = "contact@ingolf-wagner.de";

  sops.defaultSopsFile = ../../secrets/robi.yaml;
  # virtualisation.docker.enable = false;
  services.printing.enable = false;
  services.smartd.enable = true;

  # chungus rsync
  users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ];
  fileSystems."/var/lib/nextcloud" =
    {
      device = "/dev/vg/nextcloud";
      fsType = "ext4";
    };

  fileSystems."/var/lib/borgbackup" =
    {
      device = "/dev/vg/borg";
      fsType = "ext4";
    };

  fileSystems."/media" =
    {
      device = "/dev/vg/media";
      fsType = "ext4";
    };

  # usually part of the wifi.nix module
  # because Networkd-wait-online is just failing.
  #systemd.services.systemd-networkd-wait-online.enable = false;
  systemd.services.NetworkManager-wait-online.enable = false;

}