{
  config,
  pkgs,
  ...
}:
{
  imports = [
    ../roles/nix-build-client.nix

    ../settings/darwin.nix
    ../settings/programs/shell.nix
    ../settings/programs/base.nix
  ];

  system.primaryUser = "alin";
  system.primaryUserHome = "/Users/alin";
  users.users."${config.system.primaryUser}".openssh.authorizedKeys.keys = [
    "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBENXbdPPOq0mA+9bPklpUkikvIXjCEKE5IRwNPNMr5/Ta1J/ND737fexCjEb7YPoAJtaf0gD/JThQQi/RxDTvy4= alin@alin.ovh"
  ];

  services.openssh.extraConfig = ''
    PermitUserEnvironment yes
    AcceptEnv TERM_PROGRAM
  '';

  networking = {
    hostName = "marvin";
    localHostName = "Paranoid-Android";
  };

  services.redis = {
    enable = true;
    bind = "127.0.0.1 ::1";
    extraConfig = ''
      save ""
    '';
  };

  services.tailscale = {
    enable = true;
  };
  environment.etc."resolver/ts.net".text = ''
    nameserver fd7a:115c:a1e0::53
  '';

  environment.shells = with pkgs; [
    fish
    "/Users/alin/.local/state/nix/profile/bin/fish"
  ];

  environment.variables.LANG = "en_GB.UTF-8";

  # Used for backwards compatibility, please read the changelog before changing.
  # $ darwin-rebuild changelog
  system.stateVersion = 4;
  ids.gids.nixbld = 350;

  nix.linux-builder = {
    enable = false; # will be needed for building the rosetta image
    systems = [ "aarch64-linux" ];
    speedFactor = 8;
  };

  nix-rosetta-builder = {
    enable = true;
    onDemand = true;
    onDemandLingerMinutes = 10;
    memory = "8GiB";
    speedFactor = 8;
    permitNonRootSshAccess = true;
  };
}