{
  pkgs,
  agenix,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
    ./system.nix
    agenix.nixosModules.default

    ./acme.nix
    ./bitwarden.nix
    ./borg.nix
    ./mosh.nix
    ./website.nix
    ./weechat.nix

    ../../users/maintainer
  ];

  # TODO: put somewhere
  age.identityPaths = ["/home/buffet/.ssh/id_agenix"];
  networking.hostName = "tara";

  users = {
    mutableUsers = false;
    users.root.hashedPassword = "!";
  };

  environment.systemPackages = with pkgs; [
    git
    htop
    neovim
    tree
  ];

  services.syncthing.enable = true;
}