{
  inputs,
  username,
  ...
}:
{
  system.stateVersion = "25.05";

  imports = [
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480s
    inputs.disko.nixosModules.disko
    ./disko.nix

    ../../os/default.nix
  ];

  hardware.facter.reportPath = /etc/nixos/hosts/thinkpad/facter.json;

  os = {
    core = {
      allowUnfree.enable = true;

      audio.enable = true;
      bootloader = {
        type = "grub";
        timeout = 0;
        luks.enable = true;
        grub = {
          device = "/dev/nvme0n1";
          signing = {
            enable = true;
            keyId = "3D95543550A5A23A";
          };
        };
      };
      drivers = {
        enable = true;
        cpu = "intel";
        graphics.enable = true;
        kernel = "stable";
      };
      fonts.enable = true;
      greet.enable = true;
      home-manager = {
        enable = true;
        users.${username}.path = ./home.nix;
      };
      locale.enable = true;
      memory = {
        zram.enable = true;
        swapfile.enable = true;
      };
      network.enable = true;
      power = {
        enable = true;
        mode = "intel";
      };
      security.enable = true;
      ssh.enable = true;
      storage.enable = true;
      users.enable = true;
    };
    srv = {
      bluetooth.enable = true;
      files = {
        enable = true;
        localsend.enable = true;
      };
      gaming = {
        enable = true;
        steam.enable = true;
      };
      virtualization = {
        kvm.enable = true;
        waydroid.enable = true;
      };
      kdeconnect.enable = true;
      nix-helper.enable = true;
      monero.enable = true;
      sops.enable = true;
    };
    wm = {
      enable = true;
      niri.enable = true;
    };
  };
  services.thinkfan.enable = true;
  boot.kernelParams = [ "iomem=relaxed" ];
}