{ ... }:
{
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
  };

  networking = {
    hostName = "metrics-nekomesh";
    firewall = {
      enable = true;
      allowedTCPPorts = [ 80 443 ];
    };
  };

  system.stateVersion = "25.11";
}