{ ... }:
{
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
  };

  networking = {
    hostName = "matrix";
    firewall = {
      enable = true;
      allowedTCPPorts = [ 80 8443 8448 ];
    };
  };

  system.stateVersion = "23.05";
}