{
  config,
  lib,
  pkgs,
  modulesPath,
  user,
  ...
}: {
  imports = [
    ./conduit.nix
    (modulesPath + "/profiles/qemu-guest.nix")
  ];
  boot.supportedFilesystems = ["btrfs"];
  boot.loader.grub.device = "/dev/vda";
  boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
  boot.initrd.kernelModules = ["nvme"];
  fileSystems."/" = {
    device = "/dev/vda1";
    fsType = "ext4";
  };
  fileSystems."/nix" = {
    device = "/dev/sda";
    fsType = "btrfs";
    options = ["compress=zstd" "noatime"];
  };
  boot.cleanTmpDir = true;
  swapDevices = [
    {
      device = "/var/lib/swapfile";
      size = 2 * 1024;
    }
  ];
  networking.hostName = "satelite";
  networking.firewall.allowedTCPPorts = [80 443 8448 2222];
  boot.scaleway = true;
  environment.systemPackages = with pkgs; [
    vim
    foot.terminfo
    alacritty.terminfo
  ];

  mailserver = {
    enable = true;
    fqdn = "mail.nrab.lol";
    domains = ["nrab.lol"];

    # nix shell nixpkgs#apacheHttpd -c htpasswd -nbB "" "super secret password" | cut -d: -f2
    loginAccounts = {
      "1337@nrab.lol" = {
        hashedPasswordFile = pkgs.copyPathToStore ../../assets/leetpassword;
      };
      "alert@nrab.lol" = {
        hashedPasswordFile = pkgs.copyPathToStore ../../assets/alertpassword;
        sendOnly = true;
        sendOnlyRejectMessage = "";
      };
    };

    certificateScheme = 3;
  };
}