{ config, pkgs, lib, inputs, nixpkgs-nixos-unstable-and-unfree, ... }:
let
  stateVersion = "22.11";
  username = "cyryl";
in {
  imports = [
    ./common-hardware.nix
    ./common-services.nix
    ./security.nix
    ./syncthing.nix
  ];

  security.allowUserNamespaces = true;

  environment.enableDebugInfo = true;

  environment.systemPackages = with pkgs; [
    ccache
    curl
    davfs2
    dnsutils
    fd
    git
    gnupg
    home-manager
    htop
    pciutils
    powertop
    sshfs
    tmux
    usbutils
    wget
    nixpkgs-nixos-unstable-and-unfree.veracrypt
  ];

  i18n.defaultLocale = "en_GB.UTF-8";

  users.users."${username}" = {
    isNormalUser = true;
    extraGroups = [
      "adbusers"
      "davfs2"
      "dialout"
      "docker"
      "libvirtd"
      "lp"
      "networkmanager"
      "scanner"
      "vboxusers"
      "video"
      "wheel"
      "wireshark"
    ];
    shell = pkgs.zsh;
  };

  networking.nameservers =
    [ "9.9.9.9" "2620:fe::fe" "149.112.112.112" "2620:fe::9" ];

  networking.hosts = { "10.11.99.1" = [ "remarkable" ]; };

  programs.light.enable = true;
  programs.adb.enable = true;
  programs.wireshark.enable = true;

  virtualisation.docker = {
    enable = true;
    autoPrune.enable = true;
    daemon.settings = {
      "insecure-registries" = [ "vpsfree1.raptor-carp.ts.net:5000" ];
    };
  };

  fonts.fontconfig = {
    enable = true;
    defaultFonts.monospace = [ "Berkeley Mono" ];
  };

  fonts.fonts = with pkgs;
    [
      (fetchzip {
        url = "file://" + ./fonts.tar.xz;
        sha256 = "sha256-YRd10UKJjXPZPIbE10EVae7EpmIdJ3mj1zl9JKEklGs=";
      })
    ];

  nix = {
    settings.auto-optimise-store = true;
    gc.automatic = true;
    optimise.automatic = true;
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
      stalled-download-timeout = 30
    '';
  };

  system = { inherit stateVersion; };
}