{ lib, ... }:
{
  imports = [
    ./hardware-configuration.nix
    ./nvidia.nix
    ./backup.nix
    ./firewall.nix
  ];

  ## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
  networking.hosts = {
    "127.0.0.1" = [ "omega-relay.local" ];
  };

  ## Addons for this system
  addons = {
    desktop.hyprland.enable = true;
    desktop.xfce.enable = true;
    steam.enable = true;

    virtualisation.guest = false;
    virtualisation.host = true;

    vpn.mullvad.enable = true;
    vpn.eduvpn.enable = true;
    gpg.enable = true;

    remote_builder = {
      enable = true;
      allowedKeyFiles = [ ../../secrets/eli.pub ];
      openFirewall = true;
    };
  };

  boot.loader.grub = {
    useOSProber = true;
    device = "nodev";

    efiSupport = true;
    default = "saved";
    memtest86.enable = true;
    # splashImage = ./GrubBG.png;
  };
  boot.loader.efi.canTouchEfiVariables = true;
  boot.initrd.systemd.enable = true;
  boot.crashDump.enable = true;
  boot.plymouth = {
    enable = true;
    theme = "bgrt";
  };

  boot.kernelParams = [
    "quiet"
    "splash"
    "loglevel=3"
    "rd.systemd.show_status=false"
    "rd.udev.log_level=3"
    "udev.logpriority=3"
  ];
  boot.consoleLogLevel = 0;

  networking.hostName = "apocalypse"; # Define your hostname.
  networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.

  hardware.bluetooth.enable = true;
  hardware.bluetooth.settings = {
    General = {
      Enable = "Source,Sink,Media,Socket";
    };
  };

  hardware.bluetooth.powerOnBoot = true;
  services.blueman.enable = true;

  programs.nix-ld.enable = true;
  services.printing.enable = true;

  services.resolved = {
    enable = true;
    dnssec = "false";
    domains = [ "~." ];
    fallbackDns = [ ];
    dnsovertls = "opportunistic";
  };

  networking.useDHCP = lib.mkDefault true;
  networking.firewall.checkReversePath = false;

  # Thunderbolt
  services.hardware.bolt.enable = true;
  powerManagement.enable = true;

  # Firmware updates
  services.fwupd.enable = true;

  services.openssh = {
    enable = true;
    ports = [ 22 ];
    openFirewall = false;
    allowSFTP = false;
    settings = {
      PasswordAuthentication = false;
      AllowUsers = [ "wilkuu" ];
      X11Forwarding = false;
      PermitRootLogin = "no";
      PrintMotd = true;
    };
  };

  services.thinkfan = {
    enable = true;
    levels = [
      [
        0
        0
        55
      ]
      [
        1
        48
        60
      ]
      [
        2
        50
        65
      ]
      [
        3
        55
        67
      ]
      [
        4
        56
        68
      ]
      [
        5
        60
        70
      ]
      [
        6
        65
        72
      ]
      [
        7
        66
        85
      ]
      [
        "level disengaged"
        84
        32767
      ]
    ];
  };
}