{ config, pkgs, ... }:

{
  environment.systemPackages = [
    pkgs.yate
    pkgs.git
    pkgs.tcpdump
    pkgs.tmux
  ];

  # Just disable it for now.
  networking.firewall.enable = false;

  users.groups.yate-config = {};
  users.groups.yate-config.members = [ "colmema-deploy" "chaos" ];

  environment.etc.yate.user = "root";
  environment.etc.yate.group = "yate-config";
  environment.etc.yate.mode = "0775";
  environment.etc.yate.source = "/var/lib/yate";
}