{ ... }:

{
  imports = [
    ../common.nix
    ../../services/openssh.nix
    ../../services/prometheus-node.nix
    ./hedgedoc.nix
  ];

  networking = {
    hostName = "md";
    firewall = {
      allowedTCPPorts = [
        80 # HTTP/1
        443 # HTTP/2
      ];
      allowedUDPPorts = [
        443 # HTTP/3
      ];
    };
  };

  environment.etc."ssh/banner".text = ''
                  __
                 /\ \
      ___ ___    \_\ \
    /' __` __`\  /'_` \
    /\ \/\ \/\ \/\ \L\ \
    \ \_\ \_\ \_\ \___,_\
     \/_/\/_/\/_/\/__,__/
  '';
  services.openssh.settings.Banner = "/etc/ssh/banner";

  system.stateVersion = "25.11";
}