{
  pkgs,
  lib,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
    ./cachix.nix
  ];

  boot.kernelPackages = pkgs.linuxKernel.packages.linux_hardened;
  security.allowUserNamespaces = true;
  services.logrotate.checkConfig = false; # per https://discourse.nixos.org/t/logrotate-config-fails-due-to-missing-group-30000/28501/9

  boot.loader = {
    limine = {
      enable = true;
      efiSupport = true;
    };
    grub = {
      enable = false;
      devices = ["nodev"];
      useOSProber = true;
      efiSupport = true;
    };
    efi.canTouchEfiVariables = true;
    timeout = lib.mkDefault 2;
  };

  services.displayManager = {
    enable = true;
    ly.enable = true;
    defaultSession = "none+xmonad";
  };

  programs.steam.enable = true;

  programs.niri.enable = true;
  programs.sway.enable = true;
  services.libinput.enable = true;
  services.xserver = {
    enable = true;
    windowManager.xmonad = {
      enable = true;
      enableContribAndExtras = true;
    };
  };

  networking = {
    hostName = "nixos";
    networkmanager.enable = true;
    dhcpcd.enable = false;
    firewall.enable = true;
  };

  hardware.bluetooth.enable = true;
  hardware.bluetooth.powerOnBoot = true;
  hardware.opengl.enable = true;
  services.blueman.enable = true;

  services.printing.enable = true;

  nixpkgs.config.allowUnfreePredicate = pkg:
    builtins.elem (lib.getName pkg) [
      "steam"
      "steam-original"
      "steam-unwrapped"
      "steam-run"
    ];

  time.timeZone = "Europe/Berlin";

  i18n.defaultLocale = "de_DE.UTF-8";

  users.users.mtgmonkey = {
    isNormalUser = true;
    description = "mtgmonkey";
    extraGroups = ["networkmanager" "wheel"];
  };

  users.users.test = {
    isNormalUser = true;
    description = "test";
    extraGroups = ["networkmanager" "wheel"];
  };

  nix.settings.experimental-features = ["nix-command" "flakes"];

  system.stateVersion = "25.11";
}