{
  pkgs,
  ...
}:
{
  imports = [
    ../../features/vim.nix
    ../../features/docker.nix
    ../../features/libvirt.nix
    ../../features/avahi.nix
    ../../features/systemd-boot.nix
    ../../features/i18n.nix
    ../../features/sudo.nix
    ../../features/sops.nix
    ../../features/users.nix
    ./nix-package-manager.nix
  ];

  programs.bash.enable = true;

  services = {
    openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false;
        KbdInteractiveAuthentication = false;
      };
    };
    resolved.enable = false;
  };

  networking = {
    useNetworkd = true;

    firewall = {
      trustedInterfaces = [ "br0" ];
      allowedTCPPorts = [ 22 ];
    };
  };

  systemd.network = {
    enable = true;

    netdevs = {
      "30-br0" = {
        netdevConfig = {
          Kind = "bridge";
          Name = "br0";
          MACAddress = "none";
        };
      };
    };

    networks = {
      "30-eno1" = {
        name = "eno1";
        bridge = [ "br0" ];
      };

      "30-br0" = {
        name = "br0";

        networkConfig = {
          DHCP = "ipv4";
          IPv6AcceptRA = true;
        };
      };
    };

    links = {
      "30-br0" = {
        matchConfig = {
          OriginalName = "br0";
        };

        linkConfig = {
          MACAddressPolicy = "none";
        };
      };
    };
  };

  environment = {
    systemPackages =
      import ../../features/common-pkgs.nix { inherit pkgs; }
      ++ (with pkgs; [
        guestfs-tools
        borgbackup
      ]);

    shellAliases = import ../../features/aliases.nix { inherit pkgs; };
    sessionVariables = import ../../features/xdg.nix { inherit pkgs; };
  };

  system.stateVersion = "26.05";
}