{config, ...}: {
  collinux = {
    theme = "terminal";

    secrets = {
      "williams-psk" = {
        file = ./secrets/williams-psk.age;
        owner = "wpa_supplicant";
      };

      "gliese-key" = {
        file = ../gliese-key.age;
        owner = "collin";
      };

      "caddy-env".file = ./secrets/caddy-env.age;

      "collin-copyparty-password" = {
        file = ./secrets/collin-copyparty-password.age;
        owner = "copyparty";
      };
      "collin-forgejo-password" = {
        file = ./secrets/collin-forgejo-password.age;
        owner = "forgejo";
      };
      "wireguard-pk" = {
        file = ./secrets/wireguard-pk.age;
        owner = "systemd-network";
      };
    };

    terminal = {
      programs = {
        git = {
          enable = true;
          userName = "Collin Williams";
          userEmail = "96917990+bluedragon1221@users.noreply.github.com";
          installKey = true;
        };
        helix.enable = true;
      };
    };

    system.network = {
      static = {
        ip = "192.168.50.2/24";
        gateway = "192.168.50.1";
      };
      wireless.static = {
        ssid = "williams";
        pskFile = config.collinux.secrets."williams-psk".path;
      };
    };

    services = {
      sshd = {
        enable = true;
        portConfig = [
          {
            port = 2222;
            listenAddr = "0.0.0.0";
            rootLogin = true;
          }
          {
            port = 22;
            listenAddr = "0.0.0.0";
            rootLogin = true;
          }
        ];
      };

      goaccess = {
        enable = true;
        privateUrl = "stats.ganymede";
      };
      btopweb = {
        enable = true;
        privateUrl = "btop.ganymede";
      };

      cgit = {
        enable = true;
        privateUrl = "git.ganymede";
      };

      agate = {
        enable = true;
        publicUrl = "williamsfam.us.com";
      };

      minecraft = {
        enable = true;
        listenAddr = "0.0.0.0";
      };

      polaris = {
        enable = true;
        privateUrl = "music.ganymede";
      };

      qbittorrent = {
        enable = true;
        privateUrl = "bittorrent.ganymede";
      };
      copyparty = {
        enable = true;
        listenAddr = "0.0.0.0";
        publicUrl = "up.williamsfam.us.com";
        privateUrl = "files.ganymede";

        users.collin = {
          isAdmin = true;
          passwordFile = config.collinux.secrets."collin-copyparty-password".path;
          hasPublicDir = true;
        };
      };

      caddy = {
        enable = true;
        envFile = config.collinux.secrets."caddy-env".path;
      };
    };
  };
}