{ config, pkgs, ... }:
{
  imports = [
    ./base-minimal.nix

    # Filesystem settings.
    ./btrfs-scrub.nix

    # DNS settings.
    #
    # TODO add nix option
    ./dns.nix # Encrypted DNS queries to custom name servers.
    #./dns-unencrypted.nix # Custom name servers.

    # Nix garbage collection.
    ./nix-gc.nix
    # Display contact information during boot.
    ./initrd-contact-info.nix
  ];

  # Enables wireless support via wpa_supplicant.
  # networking.wireless.enable = true;
  #
  # Enable networking.
  networking.networkmanager.enable = true;
  #
  users.users.yoda = {
    extraGroups = [ "networkmanager" ];
  };

  nix.settings.auto-optimise-store = true;

  # Firewall.
  # https://nixos.wiki/wiki/Firewall
  # Note: Firewall rules may be bypassed/overwritten by Docker, as per https://github.com/NixOS/nixpkgs/issues/111852
  networking.firewall.enable = true;
}