{ config, lib, pkgs, ... }:

{
  # Shared users
  users.mutableUsers = false;
  users.users.phoenix = {
    isNormalUser = true;
    description = "Phoenix";
    extraGroups = [ "wheel" ];
    shell = pkgs.bash;
    home = "/home/phoenix";
    createHome = true;
    useDefaultShell = true;
  };

  # Shared packages
  environment.systemPackages = with pkgs; [
    nano
    vim
    git
    curl
    wget
    sops
    age
  ];

  # Shared services
  services.openssh.enable = true;
  services.openssh.permitRootLogin = "no";

  # Timezone and locale
  time.timeZone = "Europe/London";
  i18n.defaultLocale = "en_US.UTF-8";
  console.keyMap = "uk";

  # Firewall
  networking.firewall.enable = true;
  networking.firewall.allowedTCPPorts = [ 22 ]; # SSH
}