{ ... }:
{
  imports = [
    ../settings/configuration/nix-linux.nix
    ../settings/configuration/date-time.nix
    ../settings/configuration/locale.nix

    ../settings/services/tailscale.nix
    ../settings/services/caddy.nix
    ../settings/services/ssh.nix

    ./base.nix
  ];

  services.tailscale = {
    useRoutingFeatures = "both";
    extraSetFlags = [
      "--advertise-exit-node"
    ];
  };

  services.sshguard = {
    enable = true;
  };
}