{
  config,
  username,
  pkgs-stable,
  ...
}:
{
  system.stateVersion = "25.05";

  imports = [
    ./hardware-configuration.nix
    ../../os/default.nix
  ];

  os = {
    core = {
      allowUnfree.enable = true;
      flatpak.enable = true;

      audio = {
        enable = true;
        disable-devices.enable = true;
      };
      bootloader = {
        type = "systemd-boot";
        timeout = 0;
      };
      drivers = {
        enable = true;
        cpu = "amd";
        graphics = {
          enable = true;
          amdgpu.enable = true;
        };
      };
      fonts.enable = true;
      greet.enable = true;
      home-manager = {
        enable = true;
        users.${username}.path = ./home.nix;
      };
      locale.enable = true;
      memory = {
        zram.enable = true;
        swapfile = {
          enable = true;
          size = 32;
        };
      };
      network.enable = true;
      security = {
        enable = true;
        sandboxing.enable = true;
        antivirus.enable = true;
      };
      ssh.enable = true;
      tailscale.enable = true;
      storage.enable = true;
      users.enable = true;
    };
    srv = {
      bluetooth.enable = true;
      yggdrasil.enable = true;
      i2p = {
        enable = true;
        enableBrowser = true;
      };
      tor = {
        enable = true;
        enableBrowser = true;
      };
      files = {
        enable = true;
        localsend.enable = true;
        krusader.enable = true;
      };
      gaming = {
        enable = true;
        steam.enable = true;
        vr.enable = true;
      };
      sunshine.enable = true;
      virtualization.kvm.enable = true;
      kdeconnect.enable = true;
      nix-helper.enable = true;
      ollama.enable = true;
      monero.enable = true;
      sops.enable = true;
      syncthing.enable = true;
      omnisearch.enable = true;
      vpn.enable = true;
    };
    wm = {
      enable = true;
      niri.enable = true;
    };
  };

  services.xserver.desktopManager.xfce = {
    enable = true;
    enableWaylandSession = true;
    waylandSessionCompositor = "labwc";
    enableScreensaver = false;
  };

  programs = {
    xfconf.enable = true;
    thunar.enable = true;
  };

  boot = {
    kernelModules = [
      "nct6687"
      "binder_linux"
      "ashem_linux"
    ];
    extraModulePackages = [
      config.boot.kernelPackages.nct6687d
    ];
  };

  services.netbox = {
    enable = true;
    package = pkgs-stable.netbox;
    secretKeyFile = "/var/lib/netbox/key";
    apiTokenPeppersFile = "/var/lib/netbox/api-pepper";

    settings = {
      ALLOWED_HOSTS = [
        "localhost"
        "127.0.0.1"
        "[::1]"
      ];
    };
  };

  networking.firewall.allowedTCPPorts = [ 80 ];
  services.nginx = {
    enable = true;
    user = "netbox";
    recommendedProxySettings = true;
    virtualHosts.localhost = {
      locations = {
        "/" = {
          proxyPass = "http://[::1]:8001";
        };
        "/static/" = {
          alias = "${config.services.netbox.dataDir}/static/";
        };
      };
    };
  };
}