{ inputs, username, ... }:
{
  system.stateVersion = "25.05";

  imports = [
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480s
    inputs.disko.nixosModules.disko
    ./disko.nix

    ../../os/default.nix
  ];

  hardware.facter.reportPath = ./facter.json;

  os = {
    core = {
      allowUnfree.enable = true;
      flatpak.enable = true;

      audio.enable = true;
      bootloader = {
        type = "grub";
        efi = false;
        timeout = 0;
        luks.enable = true;
      };
      drivers = {
        enable = true;
        cpu = "intel";
        graphics.enable = true;
      };
      fonts.enable = true;
      greet.enable = true;
      home-manager = {
        enable = true;
        users.${username}.path = ./home.nix;
      };
      locale.enable = true;
      memory = {
        zram.enable = true;
        swapfile.enable = true;
      };
      network.enable = true;
      security = {
        enable = true;
        sandboxing.enable = true;
      };
      storage.enable = true;
      users.enable = true;
    };
    srv = {
      bluetooth.enable = true;
      tailscale.enable = true;
      ssh.enable = true;
      firewall.enable = true;
      omnisearch.enable = true;
      i2p.enable = true;
      tor = {
        enable = true;
        enableBrowser = true;
      };
      yggdrasil.enable = true;
      files = {
        enable = true;
        localsend.enable = true;
      };
      gaming = {
        enable = true;
        games.enable = true;
        steam = {
          enable = true;
          enableSls = true;
        };
      };
      moonlight.enable = true;
      virtualization.kvm.enable = true;
      kdeconnect.enable = true;
      nix-helper.enable = true;
      monero.wallet.enable = true;
      sops.enable = true;
      syncthing.enable = true;
    };
    wm = {
      enable = true;
      niri.enable = true;
    };
  };
  # boot.kernelParams = [ "iomem=relaxed" ];
}