{
  imports = [ ./caddy.nix ];

  services.openssh = {
    enable = true;
    openFirewall = false;
  };

  networking = {
    hostName = "himeji";
    domain = "";
    nftables.enable = true;

    firewall = {
      allowedUDPPorts = [ 53 ];

      allowedTCPPorts = [
        70
        79
        80
        443
        1965
      ];
    };
  };
}