{
  config,
  lib,
  pkgs,
  ...
}:
{
  imports = [
    ./hardware-configuration.nix
    ./authentik.nix
  ];

  networking.hostName = "auth";
  networking.interfaces.ens18.ipv4.addresses = [
    {
      address = "141.56.51.96";
      prefixLength = 24;
    }
  ];

  networking.defaultGateway.address = "141.56.51.254";
  networking.nameservers = [
    "9.9.9.9"
    "1.1.1.1"
  ];

  networking.firewall.allowedTCPPorts = [
    80
    443
    3389
  ];

  system.stateVersion = "25.05";
}