{ ... }:

{
  imports = [
    ../common.nix
    ../../services/openssh.nix
    ../../services/prometheus-node.nix
    ./mqtt.nix
  ];

  networking = {
    hostName = "mqtt";
    firewall = {
      allowedTCPPorts = [
        22 # SSH
        80 # HTTP/1
        443 # HTTP/2
      ];
      allowedUDPPorts = [
        443 # HTTP/3
      ];
    };
  };

  environment.etc."ssh/banner".text = ''
                      __    __
                     /\ \__/\ \__
      ___ ___      __\ \ ,_\ \ ,_\
    /' __` __`\  /'__`\ \ \/\ \ \/
    /\ \/\ \/\ \/\ \L\ \ \ \_\ \ \_
    \ \_\ \_\ \_\ \___, \ \__\\ \__\
     \/_/\/_/\/_/\/___/\ \/__/ \/__/
                      \ \_\
                       \/_/
  '';
  services.openssh.settings.Banner = "/etc/ssh/banner";

  system.stateVersion = "26.05";
}