{ config, pkgs, ... }:
{
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  virtualisation.vmVariant.virtualisation.forwardPorts = [
    { from = "host"; host.port = 8001; guest.port = 8001; }
  ];
  networking.hosts = {
    "127.0.0.1" = [ "hedgedoc.nixin.local" ];
  };
  networking.hostName = "demo";
  #networking.firewall.enable = false;
  networking.firewall = {
    allowedTCPPorts = [ 8001 ];
  };
  services.hedgedoc = {
    enable = true;
    settings.domain = "hedgedoc.nixin.local";
    settings.port = 8001; 
    settings.host = "0.0.0.0"; 
    settings.protocolUseSSL = false;
    settings.allowOrigin = [
        "localhost"
        "hedgedoc.nixin.local"
    ];
  };
  users.users.operator = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    initialPassword = "test";
  };

  system.stateVersion = "24.05";
}