{
  lib,
  config,
  inputs,
  ...
}: {
  imports = [inputs.nixos-hardware.nixosModules.raspberry-pi-4];

  config = {
    pim = {
      tailscale.advertiseExitNode = true;
      sops-nix.usersWithSopsKeys = ["root"];
      prometheus.enable = true;
    };

    facter.reportPath = ./facter.json;
    networking.hostName = "warwick";
    system.stateVersion = "23.05";

    systemd.network.networks."30-main-nic" = {
      matchConfig.Name = lib.mkForce "end*";
      networkConfig.IPv6AcceptRA = true;
    };

    deployment = {
      targetHost = "warwick";
      targetUser = "root";
      tags = ["server"];
      buildOnTarget = true;
    };

    boot.loader.systemd-boot.enable = lib.mkForce false;
    users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;

    sops.age.keyFile = "/root/.config/sops/age/keys.txt";

    fileSystems."/" = {
      device = "/dev/disk/by-label/NIXOS_SD";
      fsType = "ext4";
      options = ["noatime"];
    };
  };
}