{ ... }:

{
  imports = [
    ../common.nix
    ../../services/openssh.nix
    ../../services/prometheus-node.nix
    ./podman.nix
    ./forgejo-runner.nix
  ];

  networking = {
    hostName = "forgejo-runner";
    firewall = {
      allowedTCPPorts = [
        22 # SSH
      ];
    };
  };

  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
  ];

  environment.etc."ssh/banner".text = ''
     _ __   __  __    ___     ___      __   _ __
    /\`'__\/\ \/\ \ /' _ `\ /' _ `\  /'__`\/\`'__\
    \ \ \/ \ \ \_\ \/\ \/\ \/\ \/\ \/\  __/\ \ \/
     \ \_\  \ \____/\ \_\ \_\ \_\ \_\ \____\\ \_\
      \/_/   \/___/  \/_/\/_/\/_/\/_/\/____/ \/_/
  '';
  services.openssh.settings.Banner = "/etc/ssh/banner";

  system.stateVersion = "26.05";
}