{
  lib,
  inputs,
  config,
  pkgs,
  ...
}:

{
  imports = [
    inputs.disko.nixosModules.disko
    ./hard.nix
    ./host.nix
    inputs.nixos-hardware.nixosModules.common-pc
    inputs.nixos-hardware.nixosModules.common-pc-ssd
    # inputs.nixos-hardware.nixosModules.lenovo-thinkpad-e14-intel-gen7 (not available yet?)
    ../../modules
    (import ../../modules/disko/zfs-encrypted-root.nix {
      inherit lib config;
      device = "/dev/nvme0n1";
    })
  ];

  home-manager.users.${config.host.username} = import ../../home/hosts/${config.host.name};

  "ai-tools".enable = true;
  anki.enable = true;
  audio.enable = true;
  bluetooth.enable = true;
  bootloader.enable = true;
  desktop.niri.enable = true;
  git.enable = true;
  keyboard.enable = true;
  localization.enable = true;
  my = {
    fonts.enable = true;
    stylix.enable = true;
    users.enable = true;
    yubikey = {
      enable = true;
      pam.enable = false;
    };
  };
  networking.enable = true;
  secrets.enable = true;
  ssh.enable = true;
  storage.enable = true;
  taskwarrior.enable = true;

  secrets.nixSigningKey.enable = true;
  restic-backup.enable = true;
  tailscale.enable = true;
  desktop.ly.enable = true;
  docker.enable = true;
  nfc.enable = true;

  firewall = {
    enable = true;
    allowedTCPPorts = [ 22 ];
  };

  hardware = {
    cpu.intel.updateMicrocode = true;
    # https://wiki.nixos.org/wiki/Intel_Graphics
    graphics = {
      enable = true;
      extraPackages = with pkgs; [
        intel-media-driver
        vpl-gpu-rt
        intel-compute-runtime
      ];
    };
  };

  # https://wiki.nixos.org/wiki/Intel_Graphics
  environment.sessionVariables = {
    LIBVA_DRIVER_NAME = "iHD";
  };

  environment.systemPackages = [
    inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena
    (pkgs.writeShellApplication {
      name = "wol-andromache";
      runtimeInputs = [ pkgs.wakeonlan ];
      text = ''
        wakeonlan ${(import ../andromache/wol-interfaces.nix).eno1.macAddress}
      '';
    })
  ];

  networking = {
    hostId = "80eef97e";
    useDHCP = false;
    useNetworkd = true;
  };

  systemd.network.networks."40-wlan0" = {
    matchConfig.Name = "wlan0";
    networkConfig.DHCP = "yes";
  };

  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  services = {
    resolved.enable = true;
    fwupd.enable = true;
    locate = {
      enable = true;
      package = pkgs.plocate;
    };
    tlp = {
      enable = true;
      settings = {
        CPU_SCALING_GOVERNOR_ON_AC = "performance";
        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";

        CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
        CPU_ENERGY_PERF_POLICY_ON_AC = "performance";

        CPU_MIN_PERF_ON_AC = 0;
        CPU_MAX_PERF_ON_AC = 100;
        CPU_MIN_PERF_ON_BAT = 0;
        CPU_MAX_PERF_ON_BAT = 20;
      };
    };
  };
}