{ pkgs, ... }:
{
  imports = [
    ./hardware-configuration.nix
    ./networking.nix
    ./users.nix
    ./power-plan.nix
    ../../modules/common/incus.nix
  ];

  # ── Docker host inside Incus ──
  services.docker-host-incus.enable = true;
  services.docker-host-incus.ip = "10.0.0.2";

  networking.interfaces.eth0.wakeOnLan.enable = true;

  # ── NetBird zero-trust VPN ─────────────────────────────────
  services.netbird.enable = true;
}