{ ... }: {
  imports = [
    ../../common
    ../../profiles/builder.nix
    ../../profiles/headless.nix
    ../../profiles/kartoffel.nix
    ../../profiles/lxc.nix
    ../../services/akkoma
    ../../services/nginx.nix
    ../../services/hydra
    ../../services/update-nixfiles.nix
  ];
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  networking = {
    hostName = "seras";
    firewall.allowedTCPPorts = [ 80 443 ];
  };
  systemd.network.networks."98-eth-default" = {
    address = [
      "2a0f:be01:0:100::169/128" 
    ];
  };

  services.postgresql.settings = {
    max_connections = 200;
    shared_buffers = "24GB";
    effective_cache_size = "72GB";
    maintenance_work_mem = "2GB";
    checkpoint_completion_target = 0.9;
    wal_buffers = "16MB";
    default_statistics_target = 100;
    random_page_cost = 1.1;
    effective_io_concurrency = 200;
    work_mem = "31457kB";
    huge_pages = "try";
    min_wal_size = "1GB";
    max_wal_size = "4GB";
    max_worker_processes = 32;
    max_parallel_workers_per_gather = 4;
    max_parallel_workers = 32;
    max_parallel_maintenance_workers = 4;
  };

  kyouma.ooklaserver = {
    enable = true;
    openFirewall = true;
    domain = "speedtest.kyouma.net";
    settings.openSSL.server.minimumTLSProtocol = "1.3";
  };
}