{ pkgs, ... }:
	{
		console = {
			font = "Lat2-Terminus16";
			keyMap = "us";
		};

		i18n = {
			defaultLocale = "en_US.UTF-8";
		};

		time.timeZone = "Europe/Amsterdam";

		environment.systemPackages = with pkgs; [
			wget
			curl
			htop
			iotop
			iftop
			nload
			lsof
			mtr
			dfc
		];

		services.openssh = {
			enable = true;
			passwordAuthentication = false;
			permitRootLogin = "yes";
		};

		users.users.root.openssh.authorizedKeys.keys = [
			"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzV5dI01NhwuL6ayiO0STcSQiDf7lEtu63NuLZKQUdZVuVHIqyt3Gquks2OI1NZGrJdXA315yw89ZqyMo+z7gSGHEV6P0fAXKW6G78JOFWsA5lGpaLxTsZ6Q7r0Z9FMqDvA5Jlsyznyj9hhO1cz01WPLzB92ypd9ifldtrAQIYQItxGXOuRkBJiShuIRqtr4Q2chXiOoRZKb4v4Gyt/UPxTpvfM/zcOz0zi1d4ijSbLqgIUJhxvrWADfdgEQ77unepDoD+HT51QBX7dj8RuYivxLSA3vpfNeCgt2CYBf6FYnmWkWSnN1RCtQPJNxsMuLzC2ZBbIkz0tDgcIBPbHxGr sven@linux-rfa7.site"
		];

		nix.gc = {
			automatic = true;
			dates = "00:00";
			options = "--delete-older-than 14d";
		};

		security.acme = {
			acceptTerms = true;
			email = "admin+certs@cryto.net";
		};

		networking.firewall.logRefusedConnections = false;
	}
