{ config, inputs, ... }:
{
  imports = [
    (inputs.import-tree ./services)
  ];
  system.stateVersion = "25.11";
  networking.fqdn = "rigel.local";
  networking.firewall.allowedTCPPorts = [
    22
    80
    443
  ];
  security.acme.defaults.email = "admin@b4l.co.th";
  security.acme.acceptTerms = true;
  services.nginx.virtualHosts."${config.networking.fqdn}" = {
    enableACME = true;
  };
}