{ ... }:
{
  boot = {
    loader.grub = {
      enable = true;
      device = "/dev/vda";
    };

    binfmt.emulatedSystems = [
      "armv6l-linux"
      "armv7l-linux"
      "aarch64-linux"
    ];
  };

  networking = {
    hostName = "hydra";
    firewall = {
      enable = true;
      allowedTCPPorts = [ 8443 ];
    };
  };

  nix = {
    settings.allowed-uris = "http:// https://";
    buildMachines = [
      {
        hostName = "localhost";
        systems = [
          "x86_64-linux"
          "armv6l-linux"
          "armv7l-linux"
          "aarch64-linux"
        ];
      }
    ];
  };

  system.stateVersion = "23.05";
}