{ me, machines, ... }:

{
  imports = [
    ../../modules/common.nix
    ../../modules/vpn/egress.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      enable = false;

      public = false;
      tailnet = false;
    };

    monitoring.client.enable = false;

    wireguard.server.externalInterface = "enp6s16";
  };

  system.stateVersion = "25.05";
}