{
  config,
  lib,
  ...
}:
{
  nixfiles.modules = {
    wireguard.client.enable = true;

    syncthing.enable = true;

    acme.enable = true;

    piracy = {
      enable = true;
      lidarr.enable = true;
      radarr.enable = false;
      sonarr.enable = false;
    };
  };

  services.nfs.server = {
    enable = true;
    exports =
      lib.concatMapStringsSep "\n"
        (
          dir:
          let
            target = s: "${s}(insecure,ro,no_subtree_check)";
            v4 = target config.nixfiles.modules.wireguard.ipv4.subnet;
            v6 = target config.nixfiles.modules.wireguard.ipv6.subnet;
          in
          "${dir} ${v4} ${v6}"
        )
        [
          "/export/rtorrent"
          "/export/music"
        ];
  };

  boot.loader.grub = {
    enable = true;
    device = "/dev/sda";
    configurationLimit = 5;
  };

  fileSystems = {
    "/" = {
      device = "/dev/sda2";
      fsType = "ext4";
      options = [ "noatime" ];
    };

    "/export/music" = {
      device = "/var/lib/lidarr/root";
      options = [ "bind" ];
    };
  };

  swapDevices = [ { device = "/dev/sda3"; } ];

  zramSwap = {
    enable = true;
    memoryPercent = 50;
  };
}