_:
{
  lib,
  pkgs,
  config,
  ...
}:
{
  local = {
    remoteBuild.enable = true;
    DM = {
      lightdm.enable = true;
      autoLogin = true;
      loginUser = "jo";
    };
    DE.xfce.enable = true;
    theming = {
      enable = true;
      kmscon.enable = true;
    };
  };

  environment.systemPackages = builtins.attrValues {
    inherit (pkgs)
      neovim
      vlc
      nomacs
      rsync
      pavucontrol # gui volume control
      librewolf # best browser
      chromium
    ;
  };
  services.xserver.videoDrivers = [ "intel" ];

  networking.networkmanager.enable = true;

  boot.kernelPackages = pkgs.linuxPackages_latest;

  sops.secrets.root.neededForUsers = true;

  users = {
    mutableUsers = false;
    users = {
      jo = {
        useDefaultShell = true;
        uid = 1000;
        isNormalUser = true;
        extraGroups = [
          "networkmanager"
          "audio"
        ];
        initialHashedPassword = "";
      };
      "root" = {
        uid = 0;
        home = "/root";
        openssh.authorizedKeys.keys = [
          config.local.keys.gerg_gerg-phone
          config.local.keys.gerg_gerg-windows
          config.local.keys.gerg_gerg-desktop
        ];
        hashedPasswordFile = config.sops.secrets.root.path;
      };
    };
  };
  services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
  boot = {
    initrd.availableKernelModules = [
      "xhci-pci"
      "ehci-pci"
      "ahci"
      "usbhid"
      "sd_mod"
      "sr_mod"
      "rtsx_usb_sdmmc"
    ];
    kernelModules = [ "kvm-intel" ];
  };
  systemd.user.tmpfiles.users.jo.rules = [
    "L+ %h/Desktop/gimp.desktop - - - - ${pkgs.gimp}/share/applications/gimp.desktop"
    "L+ %h/Desktop/org.gnome.Calculator.desktop - - - - ${pkgs.gnome.gnome-calculator}/share/applications/org.gnome.Calculator.desktop"
    "L+ %h/Desktop/org.nomacs.ImageLounge.desktop - - - - ${pkgs.nomacs}/share/applications/org.nomacs.ImageLounge.desktop"
    "L+ %h/Desktop/thunar.desktop - - - - ${pkgs.xfce.thunar}/share/applications/thunar.desktop"
    "L+ %h/Desktop/librewolf.desktop - - - - ${pkgs.librewolf}/share/applications/librewolf.desktop"
    "L+ %h/Desktop/vlc.desktop - - - - ${pkgs.vlc}/share/applications/vlc.desktop"
    "L %h/Desktop/Downloads - - - - %h/Downloads"
    "L %h/Desktop/Documents - - - - %h/Documents"
    "L %h/Desktop/Pictures - - - - %h/Pictures"
  ];

  system.stateVersion = "23.05";

  swapDevices = [ {
    device = "/swapfile";
    size = 8 * 1024;
  } ];
  _file = ./main.nix;
}