{ config, lib, pkgs, ... }:

with lib;
let
  admin = "admin@fudo.org";

  nameservers = [
    "1.1.1.1"
    "2606:4700:4700::1111"
  ];

  hostname = config.networking.hostName;

  gateway = "172.86.179.17";

in {
  config = mkIf (config.fudo.common.site == "joes") {
    time.timeZone = "America/Winnipeg";

    services.cron = {
      mailto = admin;
    };

    networking = {
      domain = "fudo.org";
      search = ["fudo.org"];
      firewall.enable = false;
      nameservers = nameservers;

      defaultGateway = gateway;
      # defaultGateway6 = gateway6;
    };

    fudo.node-exporter = {
      enable = true;
      hostname = hostname;
    };

    security.acme.certs.${hostname} = {
      email = "admin@fudo.org";
      # plugins = [
      #   "fullchain.pem"
      #   "full.pem"
      #   "key.pem"
      #   "chain.pem"
      #   "cert.pem"
      # ];
    };
    
    services.nginx = {
      enable = true;
      recommendedGzipSettings = true;
      recommendedOptimisation = true;
      recommendedTlsSettings = true;
    };
  };
}