{ inputs, ... }:
{
  imports = [
    "${inputs.self}/users/richie"
    "${inputs.self}/common/global"
    "${inputs.self}/common/optional/monitoring-agent.nix"
    "${inputs.self}/common/optional/ssh_decrypt.nix"
    "${inputs.self}/common/optional/systemd-boot.nix"
    "${inputs.self}/common/optional/update.nix"
    "${inputs.self}/common/optional/zerotier.nix"
    ./hardware.nix
  ];

  boot.kernelParams = [ "panic=10" ];

  networking = {
    hostName = "tortoise";
    hostId = "161cbd68";
    firewall.enable = true;
    networkmanager.enable = true;
  };

  services = {
    openssh.ports = [ 867 ];
  };

  systemd = {
    enableEmergencyMode = false;
    # Only takes effect if the board exposes a hardware watchdog device.
    settings.Manager = {
      RuntimeWatchdogSec = "30s";
      RebootWatchdogSec = "2m";
    };
  };

  system.stateVersion = "26.11";
}