{ ... }:

{
  imports = [
    ../../modules/common.nix
    ../../modules/vpn.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      enable = true;

      public = true;
      tailnet = true;
    };

    monitoring = {
      client.enable = true;
      services = [
        "base"
      ];
    };

    wireguard.server.externalInterface = "enp1s0";
  };

  system.stateVersion = "25.05";
}