{ me, machines, ... }:

{
  imports = [
    ../../modules/common.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      enable = true;

      public = true;
      tailnet = false;
    };

    monitoring = {
      services = [
        "base"
        "tailnet"
      ];
    };

    wireguard.server = {
      enable = true;
      externalInterface = "eth0";
    };
  };

  system.stateVersion = "25.05";
}