{pkgs, ...}: let
  username = "jolheiser";
in {
  imports = [./hardware.nix ../common];

  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    kernelParams = ["quiet" "splash"];
    loader.efi.canTouchEfiVariables = true;
    loader.systemd-boot.enable = true;
    initrd.systemd.enable = true;
  };

  hardware = {bluetooth.enable = true;};

  networking = {
    hostName = "chai";
    networkmanager.enable = true;
    firewall.enable = true;
  };

  boot.initrd.luks.devices = {
    "luks-83586073-35f8-438d-9203-99f1e966c2ca" = {
      device = "/dev/disk/by-uuid/83586073-35f8-438d-9203-99f1e966c2ca";
      keyFile = "/crypto_keyfile.bin";
    };
  };

  services = {
    blueman.enable = true;
    pcscd.enable = true;
    openssh = {
      enable = true;
      settings = {X11Forwarding = true;};
    };
    globalprotect.enable = true;
  };

  virtualisation.docker.enable = true;

  users.users."${username}" = {
    extraGroups = ["wheel" "docker"];
    isNormalUser = true;
    shell = pkgs.nushell;
  };

  environment.systemPackages = with pkgs; [
    globalprotect-openconnect
    python310
    jetbrains.pycharm-professional
    jetbrains.idea-ultimate
    jetbrains.datagrip
    libxcrypt
    subversion
    teams-for-linux
    xorg.xauth

    # Personal NUR
    nur.repos.jolheiser.prospect-mail
  ];

  system.stateVersion = "22.11";
}