{ lib, pkgs, ... }:

{
  imports =
    lib.optional (builtins.pathExists ./hardware-configuration.nix)
      ./hardware-configuration.nix;

  networking.hostName = "nixos-template";
  networking.useDHCP = lib.mkDefault true;
  networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];

  boot.loader.systemd-boot.enable = lib.mkForce false;
  boot.loader.grub = {
    enable = true;
    device = "/dev/sda";
  };

  services.qemuGuest.enable = true;
  services.openssh.enable = true;
  services.tailscale.enable = true;
  services.openssh.settings = {
    PasswordAuthentication = false;
    KbdInteractiveAuthentication = false;
    PermitRootLogin = "prohibit-password";
  };

  programs.fish.enable = true;

  users.users.micqdf = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    shell = pkgs.fish;
    openssh.authorizedKeys.keys = [
      "REPLACE_WITH_SINGLE_LINE_PUBLIC_KEY"
    ];
  };

  security.sudo.wheelNeedsPassword = false;

  environment.systemPackages = with pkgs; [
    btop
    curl
    dig
    eza
    fd
    fzf
    git
    htop
    jq
    ripgrep
    tailscale
    tree
    unzip
    vim
    neovim
    wget
  ];

  system.stateVersion = "25.05";
}