{
  config,
  lib,
  pkgs,
  inputs,
  ...
}: let
  inherit (lib) concatStringsSep;
  jvmOpts = concatStringsSep " " [
    "-XX:+UseG1GC"
    "-XX:+ParallelRefProcEnabled"
    "-XX:MaxGCPauseMillis=200"
    "-XX:+UnlockExperimentalVMOptions"
    "-XX:+DisableExplicitGC"
    "-XX:+AlwaysPreTouch"
    "-XX:G1NewSizePercent=40"
    "-XX:G1MaxNewSizePercent=50"
    "-XX:G1HeapRegionSize=16M"
    "-XX:G1ReservePercent=15"
    "-XX:G1HeapWastePercent=5"
    "-XX:G1MixedGCCountTarget=4"
    "-XX:InitiatingHeapOccupancyPercent=20"
    "-XX:G1MixedGCLiveThresholdPercent=90"
    "-XX:G1RSetUpdatingPauseTimePercent=5"
    "-XX:SurvivorRatio=32"
    "-XX:+PerfDisableSharedMem"
    "-XX:MaxTenuringThreshold=1"
  ];
  key = ["ssh-rsa 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 sprechtl@sprechtl-Laptop"];
in {
  imports = [
    ./hardware-configuration.nix
    ./nginx.nix
    ./nextcloud.nix
    #    ./teamspeak.nix
    ./matrix.nix
    ./mail.nix
    #./llm.nix
    #./nvidia.nix
    ./authentik.nix
    ./vaultwarden.nix
    ./forgejo.nix
    ./immich.nix
    inputs.mms.module
  ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  networking.hostName = "hitsugibune";
  networking.interfaces.enp0s31f6.wakeOnLan.enable = true;
  time.timeZone = "Europe/Vienna";

  nixpkgs.config.allowUnfreePredicate = pkg:
    builtins.elem (lib.getName pkg) [
      "nvidia-x11"
      "cuda_cudart"
      "libcublas"
      "cuda_cccl"
      "corefonts"
      "cuda_nvcc"
      "nvidia-settings"
    ];

  environment.systemPackages = with pkgs; [
    bc
    btop
    git
    mcrcon
    rsync
    temurin-bin-17
    vim
    wakeonlan
    wget
  ];

  services.openssh = {
    enable = true;
    # Disables SSH login via password, public key authentication is enabled
    settings = {
      PasswordAuthentication = false;
      PermitRootLogin = "prohibit-password";
    };
  };

  nix.settings.experimental-features = ["nix-command" "flakes"];

  # 9 wake on lan
  networking.firewall.allowedUDPPorts = [24454 9 5520];

  services.modded-minecraft-servers = {
    # This is mandatory, sorry.
    eula = true;

    instances = {
      # The name will be used for the state folder and system user.
      # In this case, the folder is `/var/lib/mc-aged`
      # and the user `mc-aged`.
      aged = {
        enable = false;
        jvmMaxAllocation = "42G";
        jvmInitialAllocation = "2G";
        jvmPackage = pkgs.temurin-bin-17;
        jvmOpts = jvmOpts;

        rsyncSSHKeys = key;

        serverConfig = {
          server-port = 25565;
          rcon-port = 25566;
          motd = "SIB24 Aged Server";
          white-list = true;
          spawn-protection = 0;
          # max-tick-time = 5 * 60 * 1000;
          max-tick-time = -1;
          allow-flight = true;
        };
      };

      sf3 = {
        enable = false;
        jvmMaxAllocation = "24G";
        jvmInitialAllocation = "2G";
        jvmPackage = pkgs.openjdk8-bootstrap;
        jvmOpts = jvmOpts;

        rsyncSSHKeys = key;

        serverConfig = {
          server-port = 25565;
          rcon-port = 25566;
          motd = "ouhh baby";
          white-list = true;
          spawn-protection = 0;
          # max-tick-time = 5 * 60 * 1000;
          max-tick-time = -1;
          allow-flight = true;
        };
      };
    };
  };

  systemd.services.mc-announcement = {
    description = "Minecraft Server Announcement";
    serviceConfig = {
      Type = "oneshot";
      ExecStart = "/run/current-system/sw/bin/sh -c 'for i in {1..5}; do /run/current-system/sw/bin/mcrcon -H localhost -P 25566 -p \"whatisloveohbabydonthurtmedonthurtmenomore\" \"/title @a title {\\\\\\\"text\\\\\\\":\\\\\\\"This server runs on NixOS\\\\\\\",\\\\\\\"color\\\\\\\":\\\\\\\"blue\\\\\\\",\\\\\\\"bold\\\\\\\":true}\"; sleep 2; done'";
    };
  };

  systemd.timers.mc-announcement = {
    description = "Run Minecraft Announcement every hour";
    enable = false;
    wantedBy = ["timers.target"];
    after = ["mc-aged.service"];
    timerConfig = {
      #OnCalendar = "hourly"; # Change this as needed
      OnCalendar = "*:0/15"; # Every 15 minutes
      Persistent = true;
    };
  };

  system.stateVersion = "25.11";
}