{
  config,
  pkgs,
  ...
}: {
  networking.networkmanager.enable = true;
  time.timeZone = "Europe/Bucharest";
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "ro_RO.UTF-8";
    LC_IDENTIFICATION = "ro_RO.UTF-8";
    LC_MEASUREMENT = "ro_RO.UTF-8";
    LC_MONETARY = "ro_RO.UTF-8";
    LC_NAME = "ro_RO.UTF-8";
    LC_NUMERIC = "ro_RO.UTF-8";
    LC_PAPER = "ro_RO.UTF-8";
    LC_TELEPHONE = "ro_RO.UTF-8";
    LC_TIME = "ro_RO.UTF-8";
  };

  environment.systemPackages = with pkgs; [torsocks];

  # 9050,9063,8118(HTTP)
  services.tor = {
    enable = true;
    client.enable = true;
    openFirewall = true;
    settings = {ControlPort = 9051;};
  };

  security.pki.certificates = [
    ''
      -----BEGIN CERTIFICATE-----
      MIIBlzCCATygAwIBAgIUMGyhvmeeXBYxyLLYWQvIu+tMmPcwCgYIKoZIzj0EAwIw
      FTETMBEGA1UEAwwKYmlnYm94LmxhbjAeFw0yNTA4MDkxOTQyMjlaFw0yNjA4MDkx
      OTQyMjlaMBUxEzARBgNVBAMMCmJpZ2JveC5sYW4wWTATBgcqhkjOPQIBBggqhkjO
      PQMBBwNCAARrtF3D1zX1F+/rYvyZmzH8a6htjjjZPOvCt8wO+Ji+De5zgSQmYSZA
      e4emGrkcRq/jfyIfej4BCItYkfOhovKXo2owaDAdBgNVHQ4EFgQUApgfHG8fVau5
      n74IP/xuFsYV/5owHwYDVR0jBBgwFoAUApgfHG8fVau5n74IP/xuFsYV/5owDwYD
      VR0TAQH/BAUwAwEB/zAVBgNVHREEDjAMggpiaWdib3gubGFuMAoGCCqGSM49BAMC
      A0kAMEYCIQDQmCRiuy81JpY9UKleVTaF4+XhfpuLbcWxzu8NDwis9QIhAOXP+KDz
      Z9GTvzLCJfDm13cIbqXY5AQFi9dagWEnjblm
      -----END CERTIFICATE-----''
  ];

  networking.extraHosts = ''
    192.168.0.101 box.local
    192.168.0.100 puter.local
  '';

  services.chrony = {
    enable = true;
    enableNTS = true;
    servers = ["nts.teambelgium.net" "ptbtime1.ptb.de" "paris.time.system76.com"];
  };
}