{
  config,
  pkgs,
  lib,
  ...
}:
let
  tailscaleMagicDNS = "neon-dory.ts.net";
in
{

  age.secrets = {
    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
  };

  my = {
    utils = {
      commons.enable = true;
      lxc-standard.enable = true;
    };

    networking = {
      nas-samba-share = {
        enable = true;
        allowUsers = with config.services; [
          sonarr.user
          radarr.user
          lidarr.user
          readarr.user
          bazarr.user
        ];
      };
      tailscale = {
        enable = true;
        magicDNSDomain = tailscaleMagicDNS;
        authKeyFile = config.age.secrets.tailscale-authKey.path;
      };
    };

    services.media-mgr = {
      programs.enable = true;
    };

    virtualisation = {
      proxmox.enable = true;
    };
  };

  # Extra packages
  environment.systemPackages = with pkgs; [ ];

  system.stateVersion = "24.05";
}