{ config, lib, pkgs, sources, modules, ... }:

{
  imports = [
    ../../common
    ./hardware.nix
    modules.encboot
    modules.network.nftables modules.nftnat
    ((import sources.nix-hexchen) {}).profiles.nopersist
  ];

  hexchen.encboot = {
    enable = true;
    dataset = "-a";
    networkDrivers = [ "igb" ];
  };

  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.devices = [ "/dev/nvme0n1" "/dev/nvme1n1" ];
  boot.supportedFilesystems = [ "zfs" ];

  networking.hostId = "b2867696";
  networking.useDHCP = true;
  networking.nftables.enable = true;
  hexchen.nftables.nat.enable = true;
  networking.nat.internalInterfaces = ["ve-+"];
  networking.nat.externalInterface = "enp35s0";

  system.stateVersion = "21.05";
}