{ config, pkgs, lib, name, ... }:

{
  imports = [
    ../../modules/common.nix
    ../../modules/sops.nix
    ../../modules/nextcloud.nix
    ../../modules/forgejo.nix
  ];

  networking.hostName = name;

  # Staging: open ports for web
  networking.firewall.allowedTCPPorts = [ 80 443 22 ];

  # Put placeholders for domains now; you can change later
  services.flowback = {
    nextcloudHost = "cloud-staging.example.com";
    forgejoHost   = "git-staging.example.com";
  };

  # Minimal user (replace with your SSH key)
  users.users.elifa = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGI1L2SZzAfxkdHPsgJe0cx9s0owlMPyS6LnAURzXyad eli@wsl"
    ];
  };

  security.sudo.wheelNeedsPassword = false;

  system.stateVersion = "25.11";
}