{
  inputs,
  lib,
  pkgs,
  ...
}: {
  imports = with inputs; [
    self.modules.shared.nixos
    self.nixosModules.desktop
    self.nixosModules.system
    ./disko
    ./misc
  ];

  networking = {
    hostId = "c7f6c4a1";
    hostName = "dunamis";
  };

  system.stateVersion = "25.11";
  time.timeZone = "Europe/Kyiv";

  desktop.niri.enable = true;

  services.displayManager.autoLogin = {
    enable = true;
    user = "user";
  };

  environment.systemPackages = [pkgs.labwc];
  services.xserver = {
    enable = true;
    desktopManager = {
      xterm.enable = false;
      xfce = {
        enable = true;
        noDesktop = true;
        enableXfwm = false;
      };
    };
    # windowManager.i3.enable = true;
  };
  # services.displayManager.defaultSession = "xfce";

  networking.firewall.allowedTCPPorts = [3923 3921 3990]; # for github:9001/copyparty

  networking.networkmanager.enable = lib.mkDefault false;
  systemd.network.networks."10-wan" = {
    matchConfig.Name = "enp8s0";
    networkConfig = {
      # start a DHCP Client for IPv4 Addressing/Routing
      DHCP = "ipv4";
      # accept Router Advertisements for Stateless IPv6 Autoconfiguraton (SLAAC)
      IPv6AcceptRA = true;
    };
    # make routing on this interface a dependency for network-online.target
    linkConfig.RequiredForOnline = "routable";
  };

  module = {
    config = {
      secureBoot = true;
      tpmDiskUnlock = true;
      vaapi = "intel-media-driver";
    };
    stylix = {
      enable = true;
      theme = "oxocarbon-dark";
    };
    locale = "uk_UA.UTF-8";
    misc = {
      opentabletdriver.enable = false;
      qmk-vial.enable = true;
    };
    virt.libvirt.enable = true;
    virt.podman.enable = true;
  };
}