{
  config,
  pkgs,
  lib,
  ...
}:
let
  shadowsocks-port = 8388;
  p = import ../parameters.nix;
in
{

  age.secrets = {
    shadowsocks-password.file = ../../secrets/shadowsocks-password.age;
    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
  };

  my = {

    networking = {

      shadowsocks = {
        enable = true;
        port = shadowsocks-port;
        passwordFile = config.age.secrets.shadowsocks-password.path;
      };

      tailscale = {
        enable = true;
        magicDNSDomain = p.domains.tsDns;
        authKeyFile = config.age.secrets.tailscale-authKey.path;
      };
    };

    utils = {
      commons.enable = true;
      commons.gc.enable = true;
      lxc-standard.enable = true;
    };

    virtualisation.proxmox.enable = true;
  };

  system.stateVersion = "24.11";
}