{ config, pkgs, ... }:

{
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/sda";

  networking.hostId = "a858b3c5";
  networking.hostName = "achatina-fulica";
  networking.interfaces.ens3.useDHCP = true;

  users.users = {
    root = {
      hashedPassword =
        "$6$/gxjjeCV.l8P$ClK7EH96tERP8SmXMMxCDfiNSlQZ65xQXVTDz4KOqVXJ0aBP7nFW5pfd.Yffxmow8C5DnAq1tilQs37DPBo0S/";
    };
  };

  services.qemuGuest.enable = true;

  services.glados = {
    enable = true;
    dataCollector.enable = true;
    envFile = config.sops.secrets.gladosEnv.path;
  };

  systemd.services.glados.serviceConfig.SupplementaryGroups =
    [ config.users.groups.keys.name ];

  sops.defaultSopsFile = ../secrets/achatina-fulica/secrets.yaml;
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
  # This is the actual specification of the secrets.
  sops.secrets.gladosEnv = { };

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "21.05"; # Did you read the comment?

}