{ config, pkgs, ... }:

{
	imports =
	[
		./hardware-configuration.nix
	];

### BOOT

	boot.isContainer = true;
	boot.loader.initScript.enable = true;

### CONSOLE

	i18n =
	{
		consoleKeyMap = "neo";
		consoleFont = "Lat2-Terminus16";
		defaultLocale = "en_GB.UTF-8";
	};

### TIME

	time.timeZone = "Europe/Berlin";

### SYSTEM

	networking.hostName = "nixos";

	system.stateVersion = "16.09";
	system.autoUpgrade.enable = true;

### PACKAGES

	environment.systemPackages = with pkgs;
	[
		vim
		tmux
		htop
		git
		nixops
		socat
		netcat
	];

### SERVICES

	services.openssh.enable = true;
	security.sudo.enable = true;

### SECURITY

	services.openssh.permitRootLogin = pkgs.lib.mkForce "no";
	services.openssh.challengeResponseAuthentication = false;
	services.openssh.passwordAuthentication = false;

	security.sudo.wheelNeedsPassword = false;

### NETWORKING

	networking.firewall.enable = false;
#	networking.firewall.rejectPackets = true;
#	networking.firewall.allowedTCPPorts =
#	[
#		22
#		1337
#	];

### USERS

	users.users.benaryorg =
	{
		isNormalUser = true;
		uid = 1000;
		extraGroups = ["wheel"];
		shell = pkgs.zsh;
		createHome = true;
		openssh.authorizedKeys.keys =
		[
			"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJeMwhpNHMB7Hb5WWikqTywPLX+H5JvdysIfUZsVKI2yOeUqbeEEsvfTSD08qSU3J1ioUSu312WPd4voOQnPknLsLtEBWSM96vWtQXR5EU0riA60KvN5AOsAyxl3j7taiH99RIZWzQSMxM8BNkNJfWE4bmg9VHHk5/8W8hCOZiHY0iMrqCfyoE/hCV4T+U2tZVJ9OIDtAVCQW/SMg3N1eBhbelFr7EdncRa19RAp7xc+Wk9unm87EvCxhE332FS/4S+lESdaUn6HmNszjKPfOg/OxKKR+I7OMdBRKJOgc35Xq78j75XizX3o6PdlHX1zKSdGwBTYTM2xFt9Eshxd6f"
		];
	};
}