{
  modulesPath,
  lib,
  pkgs,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
    ./nginx.nix
    # ./jmap.nix
    ../../users.nix
    ../../base.nix
    ../../server.nix
  ];
  boot = {
    loader.grub = {
      enable = true;
      device = "/dev/vda";
    };
  };

  networking = {
    hostName = "yn-bkk"; # use Digital Ocean metadata server
  };
  networking.firewall = {
    enable = false;
    #   allowedTCPPorts = [ 993 465 40308 80 443 53 51820 5522 ];
    #   allowedUDPPorts = [ 993 465 40308 80 443 53 50000 50001 50002 50003 50004 50005 50006 50007 50008 50009 50010 51820 5522 ];
  };
  # services.ntfy-sh = {
  #   enable = true;
  #   settings = {
  #     base-url = "https://n.urbit.men";
  #     listen-http = ":8090";
  #   };
  # };

  # services.headscale = {
  #   enable = true;
  #   address = "0.0.0.0";
  #   port = 8001;
  #   settings = {
  #     server_url = "https://head.urbit.men";
  #     dns.baseDomain = "urbit.men";
  #     logtail.enabled = false;
  #   };
  # };

  system.stateVersion = "24.05"; # Did you read the comment?
  environment.systemPackages = with pkgs; [
    tmux
    git
    lsd
    ncdu
    btop
    lsof
  ];
  users.users.y.openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM+qXhCHNrSZmy4HEXaFn6xAp1w2GzQBMOfVdbR3E81Q cloudboxes"];
}