{ ... }:

{
  imports = [
    ../common.nix
    ../../services/openssh.nix
    ./openssh.nix
    ../../services/prometheus-node.nix
    ./nginx.nix
  ];

  networking = {
    hostName = "www";
    firewall = {
      allowedTCPPorts = [
        80 # HTTP/1
        443 # HTTP/2
      ];
      allowedUDPPorts = [
        443 # HTTP/3
      ];
    };
  };

  environment.etc."ssh/banner".text = ''
     __  __  __  __  __  __  __  __  __
    /\ \/\ \/\ \/\ \/\ \/\ \/\ \/\ \/\ \
    \ \ \_/ \_/ \ \ \_/ \_/ \ \ \_/ \_/ \
     \ \___x___/'\ \___x___/'\ \___x___/'
      \/__//__/   \/__//__/   \/__//__/
  '';
  services.openssh.settings.Banner = "/etc/ssh/banner";

  system.stateVersion = "25.11";
}