{
  pkgs,
  lib,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    ./hardware-configuration.nix
    ../../common/default.nix
    ../../common/full-install.nix
    ../../common/allow-unfree.nix

    ../../common/locales/en.nix
    ../../common/locales/fr-keymap.nix
    ../../common/hardware/intel-cpu.nix
    ../../common/hardware/nvidia-gpu.nix
    ../../common/hardware/nvidia-gpu-offload.nix
    ../../common/hardware/ssd.nix
    ../../common/hardware/btrfs.nix
    ../../common/hardware/latest-kernel.nix

    ../../common/de/plasma6.nix
    # ../../common/de/hyprland.nix

    ../../common/tasia-packages.nix
    ../../common/packages/sshd.nix
    ../../common/packages/steam.nix
    # ../../common/packages/syncthing.nix

    # ../../modules/nixos/vedirect-reader.nix
  ];

  # boot.kernelModules = [ "fuse" "kvm-intel" "coretemp" ];

  hardware.nvidia.prime = {
    intelBusId = "PCI:1:0:0";
    nvidiaBusId = "PCI:0:2:0";
  };

  networking = {
    hostName = "new-new-phoenix";

    firewall = {
      enable = true;
      allowedTCPPorts = [
        8080 # ?
        12345 # tildefriends
        13378 # audiobookshelf
      ];
      allowedUDPPorts = [
        8080 # ?
      ];
    };
  };

  users.users.tasia = {
    isNormalUser = true;
    description = "User";
    extraGroups = ["networkmanager" "wheel" "syncthing"];
    initialPassword = "correcthorsebatterystaple";
    openssh.authorizedKeys.keys = [
      sshKeys.new-new-phoenix.tasia
    ];
  };

  services.btrfs.autoScrub.fileSystems = ["/"];

  # services.vedirect-reader.enable = true;

  virtualisation.docker.enable = true;
  # services.flatpak.enable = false;

  services.syncthing = {
    dataDir = lib.mkForce "/home/user";
    configDir = lib.mkForce "/data/sync/configuration/";
  };

  # Needed to build enry
  boot.binfmt.emulatedSystems = ["aarch64-linux"];

  environment.systemPackages = with pkgs; [
    #
  ];

  # security.auditd.enable = true;
  # security.audit.enable = true;
  # security.audit.rules = [
  #   "-a exit,always -F arch=b64 -S execve"
  # ];
  # You can monitor these logs with journalctl -f. If you don't see any audit logs show up, ssh in from another window and run some commands like ls. You should see a flurry of them show up.

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.11";
}