{
	config,
	inputs,
	user,
	hostname,
	modulesPath,
	...
}: {
	imports = [
		(modulesPath + "/installer/scan/not-detected.nix")
		(modulesPath + "/profiles/qemu-guest.nix")
		./disk-config.nix
		./hardware-configuration.nix
		./secrets.nix
		../../modules/gitea.nix
		../../profiles/core.nix
		../../profiles/fail2ban.nix
		../../profiles/nixos.nix
		../../profiles/openssh.nix
		../../profiles/tailscale.nix
		inputs.disko.nixosModules.disko
		inputs.sops-nix.nixosModules.sops
	];

	my.gitea = {
		enable = true;
		litestream = {
			bucket = "michael-gitea-litestream";
			secretFile = config.sops.secrets.michael-gitea-litestream.path;
		};
		restic = {
			bucket = "michael-gitea-repositories";
			passwordFile = config.sops.secrets.michael-gitea-restic-password.path;
			environmentFile = config.sops.secrets.michael-gitea-restic-env.path;
		};
	};

	networking.hostName = hostname;

	home-manager.users.${user} = {
		imports = [
			../../profiles/nushell.nix
			../../profiles/home.nix
			../../profiles/ssh.nix
			inputs.nixvim.homeModules.nixvim
		];
	};
}