{
  config,
  pkgs,
  ...
}: {
  imports = [
    ./authelia-main.nix
    ./webfinger.nix
  ];
  sops.secrets.rootPwd.neededForUsers = true;

  roles.base.root.hashedPasswordFile = config.sops.secrets.rootPwd.path;

  services.postgresql = {
    package = pkgs.postgresql_14;
    enable = true;
  };
  system.stateVersion = "23.05";
}