{
  config,
  pkgs,
  ...
}: {
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/sda";

  networking.hostId = "94d2a920";
  networking.hostName = "cornu-aspersum";
  networking.interfaces.ens3.useDHCP = true;

  users.users = {
    root = {
      hashedPassword = "$6$Yb1gdlKIpY1hRW1X$uUcNFuNnK2JFFN55Tkc.fPV.4I7RJvIfLEQayVP1utfkmjF0f/EHjtypxq11jR5NUUIJFQLW6ffajjduA2689.";
    };
  };

  sops.defaultSopsFile = ../secrets/hosts/cornu-aspersum/secrets.yaml;
  sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];

  sops.secrets.gladosEnv = {};
  services.glados = {
    enable = true;
    dataCollector.enable = true;
    envFile = config.sops.secrets.gladosEnv.path;
  };

  # Run grafana, mainly for ccqcraft.de
  services.grafanaWithNginx.enable = true;

  # Run radicale with infcloud interface for me and Marie
  services.radicaleWithInfcloud.enable = true;

  systemd.services.glados.serviceConfig.SupplementaryGroups = [config.users.groups.keys.name];

  services.qemuGuest.enable = true;

  # Try redirecting traffic to my local server
  services.nginx.virtualHosts."img.tammena.rocks" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {proxyPass = "http://elysia-clarki:2342/";};
  };

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "21.05"; # Did you read the comment?
}