{tree, ...}: {
  imports = with tree; [
    users.root

    hosts.hetzner-vm.modules.mailserver
    hosts.hetzner-vm.modules.piped

    profiles.base
    profiles.sshd
    profiles.nginx
    profiles.nix-gc

    hosts.hetzner-vm.profiles.restic
    #hosts.hetzner-vm.profiles.invidious
    hosts.hetzner-vm.profiles.piped
    hosts.hetzner-vm.profiles.quassel
    hosts.hetzner-vm.profiles.mpd
    hosts.hetzner-vm.profiles.mailserver
    hosts.hetzner-vm.profiles.gitlab-static-sites
    hosts.hetzner-vm.profiles.misskey
    hosts.hetzner-vm.profiles.wireguard

    ./networking.nix
    ./hardware.nix
    ./secrets.nix
  ];

  networking.firewall.allowedTCPPorts = [80 443];

  home-manager.users.root = {
    imports = with tree; [home.base home.dev.small];
    home.stateVersion = "22.05";
  };

  networking.hostName = "hetzner-vm";
  time.timeZone = "Europe/London";

  system.stateVersion = "22.05";
}