{
  lib,
  pkgs,
  inputs,
  ...
}:
{
  imports = [
    ../../common/encrypted-btrfs-layout.nix
    ../../common/global
    ../../common/base-node.nix
    ./hardware.nix
  ];

  diskLayout = {
    mainDiskDevice = "/dev/disk/by-id/ata-FORESEE_512GB_SSD_MP15B03900928";
    #keyDiskDevice = "/dev/disk/by-id/usb-Intenso_Micro_Line_22080777660586-0:0";
    keyDiskDevice = "/dev/sdb";
  };

  networking.hostName = "chilly";
  services.tailscaleAutoconnect.authkey = "tskey-auth-kRXS9oPyPm11CNTRL-BE6YnbP9J6ZZuV9dHkX17ZMnm1JGdu93";
  services.consul.interface.advertise = lib.mkForce "br0";

  virtualisation.libvirtd = {
    enable = true;
    allowedBridges = [ "br0" ];
  };

  environment.systemPackages = with pkgs; [
    unstable.qemu
    usbutils
    virt-manager
    (pkgs.writeShellScriptBin "qemu-system-x86_64-uefi" ''
      qemu-system-x86_64 \
        -bios ${pkgs.OVMF.fd}/FV/OVMF.fd \
        "$@"
    '')
  ];

  users.users.ppetru.extraGroups = [ "libvirtd" ];

  networking.useNetworkd = true;
  systemd.network.enable = true;

  systemd.network.netdevs."10-br0" = {
	netdevConfig = {
	  Name = "br0";
	  Kind = "bridge";
      # when switching to DHCP, fill this in with value from enp1s0 or something made up starting with 02:
      # MACAddress = "";
	};
  };

  systemd.network.networks."20-enp1s0" = {
	matchConfig.Name = "enp1s0";
	networkConfig.Bridge = "br0";
  };

  systemd.network.networks."30-br0" = {
	matchConfig.Name = "br0";
	networkConfig = {
      # TODO: use DHCP. Would need a hardcoded MAC (see above)
	  Address = [ "192.168.1.5/24" ];
	  Gateway = [ "192.168.1.1" ];
	  DNS = [ "192.168.1.1" ];
      # DHCP = "yes";
	};
  };
}