nixfiles/presets/nixos/containerBase.nix

{
  tree,
  inputs,
  ...
}: {
  imports =
    (with tree; [
      profiles.base
      users.root

      modules.nixos.rcloneServe
      modules.nixos.rcloneSync
      modules.nixos.secrets
      modules.nixos.postgreSQLRemoteBackup
    ])
    ++ [
      # Default modules which are usually included in nixos.nix
      inputs.home-manager-unstable.nixosModules.home-manager
      inputs.vaultui.nixosModules.default
    ];

  home-manager.users.root = {
    imports = with tree; [home.base.zsh home.base.age-encryption home.dev.small];
  };

  networking.firewall = {
    enable = true;
    allowPing = true;
    checkReversePath = "loose";
  };

  # TODO: Better DNS setup
  services.resolved.enable = false;
  environment.etc."resolv.conf".text = ''
    nameserver 8.8.8.8
    nameserver 8.8.4.4
  '';

  time.timeZone = "Europe/London";
}