#
#  DMZ — demilitarised zone server configuration
#

{ config, pkgs, user, agenix, impermanence, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ../../modules/server
  ] ++ (import ../../modules/services/dmz);

  # ── Server module options ───────────────────────────────────────────────
  myServer.virtualisation.enable = true;
  myServer.virtualisation.cpu    = "intel";

  # ── Host-specific settings ──────────────────────────────────────────────
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader = {
      systemd-boot.enable      = true;
      efi.canTouchEfiVariables = true;
      efi.efiSysMountPoint     = "/boot";
      timeout                  = 1;
    };
  };

  services = {
    qemuGuest.enable = true;
    avahi = {
      enable   = true;
      nssmdns4 = true;
      publish  = {
        enable       = true;
        addresses    = true;
        userServices = true;
      };
    };
  };
}