{
  config,
  pkgs,
  inputs,
  lib,
  ...
}:
let
  unfuckWifi = pkgs.writeShellScript "unfuckWifi" ''
    modprobe -r mt7921e
    modprobe mt7921e
  '';
in
{
  nixpkgs.system = "x86_64-linux";
  imports = [ ./hardware-configuration.nix ];
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  # TODO: remove when turning on impermanence
  sops.gnupg.sshKeyPaths = [ "/etc/ssh/ssh_host_rsa_key" ];

  home-manager.users.${config.xyno.system.user.name} = (
    { ... }:
    {
      xyno.borgmatic.enable = true;
    }
  );
  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
  ];
  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 35963 ];
  security.wrappers.unfuck-wifi = {
    owner = "root";
    group = "root";
    setuid = true;
    source = unfuckWifi;
  };

  environment.systemPackages = with pkgs; [
    aerc
    oama # required for aerc
    libsecret # required for oama
    easyeffects
    jabref
    glib # rider wants gsettings
    krita
    strawberry
    pandoc
    tectonic
    rquickshare
    supersonic-wayland
    nheko
    anki-bin
    gimp3
    anytype
    monero-gui
    orca-slicer
    unstable.kicad
    dune3d
    pencil2d
    python311Packages.brother-ql
    ptouch-print
    hledger

  ];
  environment.variables."LEDGER_FILE" = "~/docs/hledger/main.journal";

  time.timeZone = "Europe/Berlin";


  # orcaslicer
  networking.firewall.allowedTCPPorts = [
    1880
    2021
  ];
  networking.firewall.allowedUDPPorts = [
    1880
    2021
  ];

  services.tailscale.enable = true;
  services.tailscale.useRoutingFeatures = "client";
  xyno.common.enable = true;
  xyno.desktop.common-programs.enable = true;
  xyno.hardware.kmonad.enable = true;
  xyno.hardware.smartcard.enable = true;
  xyno.presets.cli.enable = true;
  xyno.presets.gui.enable = true;
  xyno.presets.development.enable = true;
  xyno.presets.home-manager.enable = true;
  xyno.system.user.enable = true;
  services.openssh.enable = true;
  xyno.user-services.syncthing = {
    enable = true;
    tray = true;
  };
  xyno.networking.networkd = {
    enable = true;
    enableWifi = true;
  };
  # xyno.desktop.easyeffects.enable = true;
  # xyno.desktop.fcitx5.enable = true;
  hardware.bluetooth.enable = true;
  services.blueman.enable = true;
  services.power-profiles-daemon.enable = true;
  programs.kdeconnect.enable = true;

  system.stateVersion = "24.11";
}