{
  pkgs,
  ...
}:

{
  imports = [
    ./hardware-configuration.nix
    ../../system
  ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  networking.hostName = "media1";
  networking.domain = "home.2rjus.net";
  networking.useNetworkd = true;
  networking.useDHCP = false;
  networking.firewall.enable = false;
  services.resolved.enable = true;
  networking.nameservers = [
    "10.69.13.5"
    "10.69.13.6"
  ];

  systemd.network.enable = true;
  systemd.network.networks."10-lan" = {
    matchConfig.Name = "enp*";
    address = [
      "10.69.31.51/24"
    ];
    routes = [
      { Gateway = "10.69.31.1"; }
    ];
    linkConfig.RequiredForOnline = "routable";
  };

  time.timeZone = "Europe/Oslo";

  homelab.host = {
    tier = "prod";
    priority = "low";
    role = "media";
  };

  # Intel N100 (Alder Lake-N) graphics
  hardware.graphics = {
    enable = true;
    extraPackages = with pkgs; [
      intel-media-driver # VA-API driver for Broadwell+
    ];
  };

  # NFS for media access
  environment.systemPackages = with pkgs; [
    nfs-utils
  ];
  services.rpcbind.enable = true;

  systemd.mounts = [
    {
      type = "nfs";
      mountConfig = {
        Options = "ro,soft,noatime";
      };
      what = "nas.home.2rjus.net:/mnt/hdd-pool/media";
      where = "/mnt/nas/media";
    }
  ];

  systemd.automounts = [
    {
      wantedBy = [ "multi-user.target" ];
      automountConfig = {
        TimeoutIdleSec = "5min";
      };
      where = "/mnt/nas/media";
    }
  ];

  vault.enable = true;

  system.stateVersion = "25.11";
}