{
  pkgs,
  inputs,
  ...
}:
{
  imports = [
    ../../features/nix-ld.nix
    ../../features/podman.nix
    ../../features/vim.nix
    ../../features/avahi.nix
    ../../features/systemd-boot.nix
    ../../features/i18n.nix
    ../../features/sudo.nix
    ../../features/sops.nix
    ../../features/users.nix
    ../../features/wine.nix
    ./nix-package-manager.nix
  ];

  boot = {
    consoleLogLevel = 3;

    kernelParams = [
      "quiet"
      "rd.udev.log_level=3"
      "rd.systemd.show_status=auto"
    ];

    kernelModules = [
      "ntsync"
    ];

    plymouth = {
      enable = true;
      theme = "bgrt";
    };
  };

  services = {
    pipewire = {
      enable = true;
      pulse.enable = true;
      alsa.enable = true;
    };
  };

  networking = {
    wireless.enable = true;
    networkmanager.enable = true;
    networkmanager.plugins = with pkgs; [ networkmanager-openvpn ];

    firewall = {
      allowedTCPPorts = [ 22 ];

      allowedTCPPortRanges = [
        {
          from = 1714;
          to = 1764;
        } # KDE Connect
      ];

      allowedUDPPortRanges = [
        {
          from = 1714;
          to = 1764;
        } # KDE Connect
      ];
    };
  };

  security.rtkit.enable = true;

  programs = {
    bash.enable = true;
    firefox.enable = true;

    appimage = {
      enable = true;
      binfmt = true;
    };
  };

  environment = {
    systemPackages =
      import ../../features/common-pkgs.nix { inherit pkgs; }
      ++ (with pkgs; [
        desktop-file-utils
        distrobox
        rtk
        inputs.pi.packages.${pkgs.stdenv.hostPlatform.system}.default
      ]);

    shellAliases = import ../../features/aliases.nix { inherit pkgs; };
    sessionVariables = import ../../features/xdg.nix { inherit pkgs; };
  };

  system.stateVersion = "26.05";
}