{ lib, config, pkgs, ... }:

with lib;

{
  orbekk.simple-firewall.enable = lib.mkForce false;
  networking.firewall.enable = true;
  orbekk.gaming.enable = true;
  orbekk.desktop.enable = true;
  orbekk.development.enable = true;
  services.printing.enable = true;
  services.printing.drivers = with pkgs; [ gutenprint brlaser ];
  services.openssh.enable = true;

  networking.firewall.allowedTCPPorts = [3979];
  networking.firewall.allowedUDPPorts = [3979];

  services.logind.extraConfig = ''
    HandlePowerKey=suspend
  '';

  nix.gc.persistent = false;
  networking.networkmanager.enable = true;
  networking.hostName = "dex";
  programs.xwayland.enable = true;
  programs.dconf.enable = true;
  environment.systemPackages = with pkgs; [ river ];
  system.autoUpgrade.enable = mkForce false;

  security.pam.enableFscrypt = true;

  system.activationScripts.fix = ''
    chown root /
  '';

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = false;

  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usbhid" "usb_storage" "sdhci" "sdhci_pci" "cqhci" "mmc_block" ];
  boot.initrd.kernelModules = [ "amdgpu" ];
  boot.kernelModules = [ "kvm-amd" ];
  boot.extraModulePackages = [ ];
  boot.kernelPackages = pkgs.unstable.linuxPackages_latest;
  boot.kernelParams = [
    "amd_iommu=off"
    "amdgpu.gttsize=8128"
    "spi_amd.speed_dev=1"
    "audit=0"
  ];

  fileSystems."/" =
    { device = "/dev/disk/by-uuid/52d3077e-d1be-4976-a2ca-f2d879a808c1";
      fsType = "ext4";
    };

  fileSystems."/home" =
    { device = "/dev/disk/by-label/home";
      fsType = "ext4";
    };

  fileSystems."/boot" =
    { device = "/dev/disk/by-uuid/D381-BD0D";
      fsType = "vfat";
    };

  swapDevices = [ ];

  networking.useDHCP = lib.mkDefault true;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

  system.stateVersion = "23.05"; # Did you read the comment?
}