{ config, inputs, lib, pkgs, ... }: {
  imports = [
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-extreme-gen4
    ../../common
    ../../profiles/graphical
    ./hardware-configuration.nix
    ./disko.nix
  ];

  boot.extraModprobeConfig = ''
    options i915 enable_guc=3
  '';
  boot.initrd.kernelModules = [ "i915" ];
  boot.kernelParams = [
    "intel_iommu=on"
    "i915.enable_guc=3"
    "nohz=on"
    "irqaffinity=9-15"
    "nohz_full=1-14"
    "rcu_nocbs=0-8"
    
  ];
  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };

  hardware.bluetooth.enable = true;
  hardware.cpu.intel.updateMicrocode = true;
  hardware.gpgSmartcards.enable = true;
  hardware.nitrokey.enable = true;

  hardware.opengl = {
    driSupport32Bit = true;
    extraPackages = [ pkgs.intel-media-driver pkgs.libvdpau-va-gl ];
  };
  hardware.sane = {
    enable = true;
    extraBackends = [ pkgs.utsushi ];
  };

  kyouma.machine-type.physical = true;
  kyouma.machine-type.portable = true;

  networking.hostName = "ryuuko";
  networking.firewall.allowedTCPPorts = [ 22000 ];
  networking.firewall.allowedUDPPorts = [ 22000 ];
  networking.networkmanager.enable = true;
  systemd.network.enable = lib.mkForce false;

  services.avahi = {
    enable = true;
    ipv6 = true;
    nssmdns4 = true;
    publish.enable = true;
    publish.userServices = true;
  };
  services.fprintd.enable = lib.mkForce false;
  services.fstrim.enable = true;
  services.openssh.enable = true;
  services.pcscd.enable = true;
  services.printing = {
    enable = true;
    drivers = [ pkgs.hplip pkgs.brlaser ];
  };
  services.usbmuxd.enable = true;

  users.mutableUsers = lib.mkForce true;
  users.users.emily.extraGroups = [  "nitrokey" "scanner" "video" ];
}