{
  lib,
  pkgs,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
    ./impermanence.nix
    ./not-managed-by-modules-yet.nix
  ];

  boot.kernelPackages = pkgs.linuxPackages_6_17;

  boot.initrd.postResumeCommands = lib.mkAfter ''
    zfs rollback -r zpool/root@blank
  '';

  sops.defaultSopsFile = ../../../../../secrets/alice/secrets.yaml;
  sops.gnupg.sshKeyPaths = ["/persist/etc/ssh/ssh_host_rsa_key"];
  sops.age.sshKeyPaths = ["/persist/etc/ssh/ssh_host_ed25519_key"];

  networking.hostId = "bc56f04f";
  networking.networkmanager.enable = true;
  # TODO: FIXME: make global setting maybe
  networking.nameservers = ["100.80.2.3"];

  time.timeZone = "Europe/Helsinki";

  system.stateVersion = "24.05";
}