infrastructure/machines/vault01/_configuration.nix

{ lib, ... }:

lib.extra.mkConfig {
  enabledModules = [
    # List of modules to enable
    "dgn-fail2ban"
  ];

  enabledServices = [
    # List of services to enable
  ];

  extraConfig = {
    dgn-fail2ban.jails =
      lib.extra.enableAttrs' "enabled" [ "sshd-bruteforce" "sshd-timeout" ];

    services.netbird.enable = true;

    dgn-hardware.useBcachefs = true;
  };

  root = ./.;
}