{
  services = {
    # hardware.openrgb.enable = true;
    flatpak.enable = true;
    fwupd.enable = true;
    openssh.enable = true;
    syncthing.openDefaultPorts = true;
    userborn.enable = true;
    dnscrypt-proxy2 = {
      enable = true;
      settings = {
        require_dnssec = true;
        server_names = ["mullvad-doh"];
        bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
      };
    };
    opensnitch = {
      enable = false;
      settings = {
        DefaultAaction = "deny";
        Firewall = "iptables";
        InterceptUnknown = true;
        ProcMonitorMethod = "ebpf";
      };
    };
    scx = {
      enable = true;
      scheduler = "scx_flash";
    };
    logind = {
      lidSwitch = "ignore";
      powerKey = "suspend";
    };
  };
}