{
  inputs,
  username,
  pkgs,
  ...
}:
{
  system.stateVersion = "25.05";

  imports = [
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480s
    inputs.disko.nixosModules.disko
    ./disko.nix

    ../../os/default.nix
  ];

  hardware.facter.reportPath = ./facter.json;

  os = {
    core = {
      allowUnfree.enable = true;
      flatpak.enable = true;

      audio.enable = true;
      bootloader = {
        type = "grub";
        efi = false;
        timeout = 0;
        luks.enable = true;
      };
      drivers = {
        enable = true;
        cpu = "intel";
        graphics.enable = true;
      };
      fonts.enable = true;
      greet.enable = true;
      home-manager = {
        enable = true;
        users.${username}.path = ./home.nix;
      };
      locale.enable = true;
      memory = {
        zram.enable = true;
        swapfile.enable = true;
      };
      network.enable = true;
      security = {
        enable = true;
        sandboxing.enable = true;
        antivirus.enable = true;
      };
      ssh.enable = true;
      storage.enable = true;
      users.enable = true;
    };
    srv = {
      omnisearch.enable = true;
      bluetooth.enable = true;
      i2p = {
        enable = true;
        enableBrowser = true;
      };
      tor = {
        enable = true;
        enableBrowser = true;
      };
      yggdrasil.enable = true;
      files = {
        enable = true;
        localsend.enable = true;
      };
      gaming = {
        enable = true;
        games.enable = true;
        steam.enable = true;
      };
      virtualization.kvm.enable = true;
      kdeconnect.enable = true;
      nix-helper.enable = true;
      monero.enable = true;
      sops.enable = true;
      syncthing.enable = true;
      vpn.enable = true;
    };
    wm = {
      enable = true;
      niri.enable = true;
    };
  };
  environment.systemPackages = [
    pkgs.appimage-run
    inputs.subtui.packages.x86_64-linux.subtui
  ];
  # boot.kernelParams = [ "iomem=relaxed" ];
}