{
	imports = [
		./calibre
		./cgit
		./forgejo
		./gemini
		./grafana
		./immich
		./jellyfin
		# ./ollama
	];
	
	services = {
		nginx = {
			enable = true;
	    recommendedGzipSettings = true;
	    recommendedOptimisation = true;
	    recommendedProxySettings = true;
		};

		sshguard.enable = true;

		openssh = {
		  enable  = false;
		  settings = {
		    PermitRootLogin = false;
		    PasswordAuthentication = false;
		    AllowTcpForwarding = false;
		    X11Forwarding = false;
		  };
		};
	};

	networking = {
		firewall.allowedTCPPorts = [ 80 ];

		hosts = {
		  "127.0.0.1" = [
		  	"library.internal"
		  	"media.internal"
		  	"photos.internal"
		  	"chat.internal"
		  	"ollama.internal"
		  	"code.internal"
		  	"forge.internal"
		  	"search.internal"
		  	"monitor.internal"
		  ];
		};
	};
}