{ pkgs, ... }:

{
  # Pins the Docker Engine version, carried forward from the pre-refactor
  # `docker` target's inline pkgs overlay.
  nixpkgs.overlays = [
    (final: prev: {
      docker = prev.docker_29;
      docker_cli = prev.docker_29;
    })
  ];

  imports = [
    ../docker/mount-data.nix
    ../docker/enable-service.nix
    ../tailscale/enable-service.nix
    ../rotate-traefik-logs.nix
    ../raspi/mount-data.nix
    ../services/nextcloud-cron-job.nix
    ../services/docker-health-to-gotify.nix
    ../services/enable-rpcbind.nix
  ];

  environment.systemPackages = with pkgs; [
    nfs-utils
  ];

  boot.supportedFilesystems = [ "nfs" ];

  systemd.tmpfiles.rules = [
    "L+ /home/nixos/docker - - - - /mnt/docker/config"
    "d /mnt/docker 0755 nixos users -"
    "d /mnt/raspi-backup 0755 nixos users -"
  ];

  users.users.nixos.extraGroups = [ "docker" ];
  services.openssh.settings.PermitRootLogin = "yes";

  networking.firewall.allowedTCPPorts = [ 80 8080 443 8090 ];
}