{ inputs, ... }@flakeContext:
let
  nixosModule =
    {
      config,
      lib,
      pkgs,
      ...
    }:
    {
      imports = with inputs; [
        ./hardware/server.nix
        self.nixosModules.default

        self.nixosModules.software.beets
        self.nixosModules.server.immich

        self.homeConfigurations.server.nixosModule # home-manager configuration module
      ];

      boot = {
        kernelPackages = pkgs.linuxPackages_xanmod_stable;
        hardwareScan = true;
        loader = {
          systemd-boot.enable = lib.mkDefault true;
          efi.canTouchEfiVariables = lib.mkDefault true;
        };
      };

      hardware = {
        bluetooth.enable = false;
      };

      #swapDevices =
      #  [ { device = "/dev/disk/by-partlabel/disk-main-swap"; }
      #  ];

      users = {
        users = {
          "${inputs.zeroq.devices.admin}" = {
            openssh.authorizedKeys.keys = [
              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKduJia+unaQQdN6X5syaHvnpIutO+yZwvfiCP4qKQ/P root@sapphira"
            ];
          };
        };
      };

      fileSystems = {
        # External drive
        "${inputs.zeroq.dirs.server-home}" = {
          device = "/dev/disk/by-uuid/37e53ebc-5343-a94d-9fe2-0ca39e13a8de";
          fsType = "ext4";
          options = [
            #"nofail"
            "x-systemd.device-timeout=0"
          ];
        };
        # beets
        "/mnt/beets/music" = {
          device = "${inputs.zeroq.dirs.server-home}/Music";
          options = [
            "bind"
            "uid=1000"
            "gid=1000"
            "fmask=0007"
            "dmask=0007"
            "nofail"
            "x-systemd.device-timeout=0"
          ];
        };
      };

      services = {
        nextcloud = {
          enable = false;
          package = pkgs.nextcloud30;
          hostName = "localhost:10000";
          database.createLocally = true;
          config = {
            dbtype = "mysql";
            dbuser = "nextcloud";
            #dbhost = "/run/postgresql";
            dbname = "nextcloud";
            adminuser = "root";
            #adminpassFile = "${inputs.zeroq.dirs.credentials-target}/nextcloud/admin-pass.txt";
          };
          settings = {
            appstoreEnable = false;
            log_type = "file";
            trusted_domains = [
              "100.64.0.0"
              "192.168.1.18"
              "localhost"
            ];
          };
          extraAppsEnable = true;
          extraApps = {
            inherit (pkgs.nextcloud30Packages.apps)
              bookmarks
              calendar
              contacts
              cookbook
              cospend
              deck
              end_to_end_encryption
              forms
              gpoddersync
              groupfolders
              impersonate
              integration_paperless
              mail
              maps
              memories
              music
              notes
              notify_push
              onlyoffice
              polls
              previewgenerator
              richdocuments
              spreed
              tasks
              user_oidc
              user_saml
              whiteboard
              ;
          };
        };
        earlyoom.enable = true;
        preload.enable = true;
        auto-cpufreq.enable = true;
        throttled.enable = true;
        nginx = {
          enable = false;
          recommendedGzipSettings = true;
          recommendedOptimisation = true;
          recommendedProxySettings = true;
          recommendedTlsSettings = true;
          virtualHosts = {
            "localhost:10000" = {
              forceSSL = false;
              enableACME = false;
              listen = [
                {
                  addr = "100.64.0.0";
                  port = 10000;
                }
                {
                  addr = "192.168.1.18";
                  port = 10000;
                }
              ];
            };
          };
        };
        journald = {
          extraConfig = ''
            SystemMaxUse=128M
          '';
        };
        samba = {
          enable = true;
          settings = {
            global = {
              "invalid users" = [ ];
              "passwd program" = "/run/wrappers/bin/passwd %u";
              security = "user";
            };
            nixos = {
              "path" = "/etc/nixos";
              "browseable" = "yes";
              "read only" = "no";
              "valid users" = "${inputs.zeroq.devices.admin}";
              "guest ok" = "no";
              "writable" = "yes";
              "create mask" = 644;
              "directory mask" = 644;
              "force user" = "${inputs.zeroq.devices.admin}";
              "force group" = "users";
            };
            root = {
              "path" = "/";
              "browseable" = "yes";
              "read only" = "no";
              "valid users" = "${inputs.zeroq.devices.admin}";
              "guest ok" = "no";
              "writable" = "yes";
              #"create mask" = 0644;
              #"directory mask" = 0644;
              "force user" = "root";
              "force group" = "root";
            };
            "${inputs.zeroq.devices.admin}" = {
              "path" = "${inputs.zeroq.dirs.server-home}";
              "browseable" = "yes";
              "read only" = "no";
              "valid users" = "${inputs.zeroq.devices.admin}";
              "guest ok" = "no";
              "writable" = "yes";
              "create mask" = 700;
              "directory mask" = 700;
              "force user" = "${inputs.zeroq.devices.admin}";
              "force group" = "users";
            };
          };
        };
        calibre-web = {
          enable = true;
          group = "users";
          user = "${inputs.zeroq.devices.admin}";
          options = {
            calibreLibrary = "${inputs.zeroq.dirs.calibre-library}";
            enableBookUploading = true;
            enableKepubify = false;
          };
          listen.ip = "0.0.0.0";
          listen.port = 8083;
          openFirewall = true;
        };
        openssh = {
          enable = true;
          allowSFTP = true;
          #knownHosts.otreca.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpMaD143EZqhRlpAgNINLrH/qXkN3zXmKgFJlhbhGwg";
          hostKeys = [
            {
              path = "/etc/ssh/id_ed25519";
              type = "ed25519";
            }
          ];
          settings = {
            PasswordAuthentication = false;
            PermitRootLogin = "yes";
            UsePAM = true;
          };
        };
        transmission = {
          enable = false;
          credentialsFile = "${inputs.zeroq.dirs.server-home}/server/transmission/settings.json";
          openRPCPort = true;
          package = pkgs.transmission_4;
          user = "${inputs.zeroq.devices.admin}";
          group = "users";
          settings = {
            download-dir = "${inputs.zeroq.dirs.server-home}/Downloads";
            incomplete-dir = "${inputs.zeroq.dirs.server-home}/Downloads/Temp";
            incomplete-dir-enabled = true;
            rpc-bind-address = "0.0.0.0";
            rpc-port = 9091;
            rpc-whitelist-enabled = false;
            umask = 0;
          };
        };
        syncthing = {
          enable = true;
          systemService = true;
          guiAddress = "0.0.0.0:8384";
          configDir = "${inputs.zeroq.dirs.storage}/Syncthing/${inputs.zeroq.devices.server.hostname}";
          dataDir = "${inputs.zeroq.dirs.server-home}";
          group = "users";
          user = "${inputs.zeroq.devices.admin}";
        };
        tailscale.enable = true;
      };

      networking = {
        hostName = "${inputs.zeroq.devices.server.hostname}";
        networkmanager.enable = true;
        firewall.enable = false;
      };

      system = {
        stateVersion = "25.05";
      };
    };
in
inputs.nixpkgs.lib.nixosSystem {
  modules = with inputs; [
    nixosModule
  ];
  system = "x86_64-linux";
}