{
  config,
  lib,
  pkgs,
  credentials,
  ...
}:

{
  imports = [
    ./hardware.nix
    ./devices.nix
    ./specimen.nix
  ];

  nix.settings.experimental-features = [
    "flakes"
    "nix-command"
  ];

  networking.hostName = "specimen";
  time.timeZone = "Europe/Berlin";
  i18n.defaultLocale = "en_US.UTF-8";

  users.mutableUsers = false;
  users.users = {
    mel = with credentials.mel; {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
      hashedPassword = password;
      openssh.authorizedKeys.keys = keys;
    };

    philip = with credentials.philip; {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
      hashedPassword = password;
      openssh.authorizedKeys.keys = keys;
    };
  };

  environment.systemPackages = with pkgs; [
    vim
    git
    wget
    agenix
  ];

  services.openssh = {
    enable = true;
    settings = {
      # i would disable this, but i don't know the ssh keys for all accounts :)
      PasswordAuthentication = true;
      AllowUsers = [
        "mel"
        "philip"
      ];
      PermitRootLogin = "no";
    };
  };

  system.stateVersion = "24.11";
}