{
  config,
  lib,
  ...
}:
{
  imports = [
    ./nix-build-client.nix
    ../settings/configuration/user.nix

    ../settings/programs/neovim.nix
    ../settings/programs/shell.nix
    ../settings/programs/base.nix
  ];

  networking = {
    nftables.enable = lib.mkDefault true;
    firewall = {
      pingLimit =
        if config.networking.nftables.enable then
          "60/minute burst 30 packets"
        else
          "--limit 60/minute --limit-burst 30";
      logRefusedConnections = false;
    };
  };
}