{
  config,
  inputs,
  pkgs,
  ...
}: {
  imports = [
    ./core

    ./hyprland.nix
  ];

  services.xserver.xkb.layout = "us";

  services.libinput.enable = true;

  environment.systemPackages = with pkgs; [
    inputs.nvim-flake.packages.x86_64-linux.nvim
    wget

    keepassxc
    jellyfin-mpv-shim
    libreoffice-qt6-fresh
  ];

  services.pcscd.enable = true;
  programs.gnupg.agent.enable = true;

  services.openssh.enable = true;

  sops.secrets.rootPwd.neededForUsers = true;
  sops.secrets.skyePwd.neededForUsers = true;

  roles.base = {
    root = {
      hashedPasswordFile = config.sops.secrets.rootPwd.path;
    };
    primaryUser = {
      username = "skye";
      isWheel = true;
      hashedPasswordFile = config.sops.secrets.skyePwd.path;
      extraGroups = ["video"];
    };
  };

  roles.tailscale = {
    enable = true;
    enableSSH = true;
  };

  roles.audio.enable = true;
  roles.bluetooth = {
    enable = true;
    enableHDAudio = true;
  };

  roles.git = {
    enable = true;
    enableLazygit = true;
    email = "jonni@liljamo.com";
    name = "Jonni Liljamo";
    gitExtraConfig = ''
      [sendemail]
          smtpserver = "smtp.migadu.com"
          smtpuser = "jonni@liljamo.com"
          smtpencryption = "ssl"
          smtpserverport = 465
    '';
  };

  roles.shell.enable = true;
  roles.zellij.enable = true;
  roles.kitty.enable = true;

  roles.docker.enable = true;

  roles.graphics = {
    enable = true;
    amd.enable = true;
  };

  roles.gaming = {
    enable = true;
    steam.enable = true;
  };

  roles.qutebrowser.enable = true;
}