{ ... }:

{
  imports = [
    ../common.nix
    ./openssh.nix
    ../../services/prometheus-node.nix
    ./forgejo.nix
    #./forgejo-runner.nix
  ];

  networking = {
    hostName = "git";
    firewall = {
      allowedTCPPorts = [
        22 # SSH
        80 # HTTP/1
        443 # HTTP/2
      ];
      allowedUDPPorts = [
        443 # HTTP/3
      ];
    };
  };

  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
  ];

  environment.etc."ssh/banner".text = ''
              __
           __/\ \__
       __ /\_\ \ ,_\
     /'_ `\/\ \ \ \/
    /\ \L\ \ \ \ \ \_
    \ \____ \ \_\ \__\
     \/___L\ \/_/\/__/
       /\____/
       \_/__/
  '';
  services.openssh.settings.Banner = "/etc/ssh/banner";

  system.stateVersion = "25.11";
}