{ ... }:

{
  imports = [
    ../common.nix
    ../../services/openssh.nix
    ../../services/prometheus-node.nix
    ./postgres.nix
  ];

  networking = {
    hostName = "sql";
    firewall.extraInputRules = ''
      ip saddr 195.160.173.0/24 ip daddr 195.160.173.15 tcp dport 5432 accept comment "Allow Postgres clients from cccb network"
      ip6 saddr 2001:678:760:cccb::/64 ip6 daddr 2001:678:760:cccb::15 tcp dport 5432 accept comment "Allow Postgres clients from cccb network"
    '';
  };

  services = {
    openssh.banner = ''
                     ___
                    /\_ \
        ____     __ \//\ \
       /',__\  /'__`\ \ \ \
      /\__, `\/\ \L\ \ \_\ \_
      \/\____/\ \___, \/\____\
       \/___/  \/___/\ \/____/
                    \ \_\
                     \/_/
    '';
  };

  system.stateVersion = "25.11";
}