{tree, ...}: {
  imports = with tree; [
    users.root
    users.chaos
    profiles.sshd
    profiles.kernels.latest

    presets.nixos.desktop
    presets.nixos.laptop
    presets.nixos.encrypted-usb

    hosts.tablet.profiles.wireguard

    ./secrets.nix
  ];

  home-manager.users.root = {
    imports = with tree; [home.base];
    home.stateVersion = "22.05";
  };

  home-manager.users.chaos = {
    imports = with tree; [
      home.base
      home.dev.all
      home.home-folders
      home.manual-backup-apps

      home.programming.editors.vscode
      home.programming.languages.rust
      home.programming.languages.nix
    ];
    home.stateVersion = "22.05";
  };

  networking.firewall.enable = true;
  networking.firewall.allowPing = true;

  networking.firewall.allowedTCPPorts = [8088];

  networking.hostName = "tablet";
  time.timeZone = "Europe/London";

  system.stateVersion = "22.05";
}