{ pkgs, ... }:

{
  services.openssh.settings.PasswordAuthentication = false;

  # Use the extlinux boot loader. (NixOS wants to enable GRUB by default)
  boot.loader.grub.enable = false;
  # Enables the generation of /boot/extlinux/extlinux.conf
  boot.loader.generic-extlinux-compatible.enable = true;

  fileSystems."/" = {
    device = "/dev/disk/by-uuid/44444444-4444-4444-8888-888888888888";
    fsType = "ext4";
  };

  environment.systemPackages = with pkgs; [
    bottom
    cryptsetup
    htop
  ];

  sops = {
    age.keyFile = "/home/asonix/.config/sops/age/keys.txt";
    age.generateKey = true;
  };
}