{
  config,
  lib,
  pkgs,
  ...
}: {
  boot.loader.systemd-boot.enable = lib.mkForce false;

  time.timeZone = "Europe/Berlin";

  services.openssh.ports = [2222];

  networking.nat.enable = true;
  networking.nat.internalIPs = ["10.10.42.0/24" "10.0.1.1"];
  networking.nat.externalInterface = "br0";

  networking.firewall.enable = lib.mkForce true;
  networking.firewall.allowedTCPPorts = [80 443 2222];
  networking.firewall.allowedUDPPorts = [51899];

  pub-solar.server.enable = true;
  hardware.ksm.enable = true;

  system.stateVersion = "21.05"; # Did you read the comment?
}