{
  config,
  pkgs,
  ...
}: {
  networking.networkmanager.enable = true;
  time.timeZone = "Europe/Bucharest";
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "ro_RO.UTF-8";
    LC_IDENTIFICATION = "ro_RO.UTF-8";
    LC_MEASUREMENT = "ro_RO.UTF-8";
    LC_MONETARY = "ro_RO.UTF-8";
    LC_NAME = "ro_RO.UTF-8";
    LC_NUMERIC = "ro_RO.UTF-8";
    LC_PAPER = "ro_RO.UTF-8";
    LC_TELEPHONE = "ro_RO.UTF-8";
    LC_TIME = "ro_RO.UTF-8";
  };

  environment.systemPackages = with pkgs; [torsocks];

  # 9050,9063,8118(HTTP)
  services.tor = {
    enable = true;
    client.enable = true;
    openFirewall = true;
    settings = {ControlPort = 9051;};
  };

  security.pki.certificates = [
    ''
      MIIBozCCAUmgAwIBAgIQJ9W99rMz2rrwI/cbvv5bGTAKBggqhkjOPQQDAjAwMS4w
      LAYDVQQDEyVDYWRkeSBMb2NhbCBBdXRob3JpdHkgLSAyMDI1IEVDQyBSb290MB4X
      DTI1MDUwNjIyMjc1MFoXDTM1MDMxNTIyMjc1MFowMDEuMCwGA1UEAxMlQ2FkZHkg
      TG9jYWwgQXV0aG9yaXR5IC0gMjAyNSBFQ0MgUm9vdDBZMBMGByqGSM49AgEGCCqG
      SM49AwEHA0IABJkvM0bS1qAPI+PV1V+bF73wpcs+AzNhL2AcOTMGJuP8+lD/3mL/
      d0dacK1ysglknxL9OjVomfsh3lM9PScwhkGjRTBDMA4GA1UdDwEB/wQEAwIBBjAS
      BgNVHRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBRORF4zdieOHunchDRkXW/XLXXO
      eTAKBggqhkjOPQQDAgNIADBFAiEAuJTbUC26fr4LcovkPVvSzv/DEC6X7Uqulp2P
      fX7vAVkCIFLGAGWcWCxJiN2MpKHYOSlzdotAYT9O5j2RZ1djEaX2''
  ];

  networking.extraHosts = ''
    192.168.0.131 bigbox.local
    192.168.0.101 box.local
    192.168.0.100 puter.local
  '';
}