{
  tree,
  pkgs,
  ...
}: {
  imports = with tree; [
    users.root
    users.chaos
    profiles.sshd
    profiles.kernels.latest

    presets.nixos.desktop
    presets.nixos.laptop
    presets.nixos.encrypted-usb

    hosts.tablet.profiles.wireguard
    hosts.tablet.profiles.harry-vpn
    hosts.tablet.profiles.misskey-dev

    ./secrets.nix
    ./profiles/wireguard.nix
    ./profiles/harry-vpn.nix
    ./profiles/misskey-dev.nix
  ];

  environment.systemPackages = with pkgs; [teamviewer];

  home-manager.users.root = {
    imports = with tree; [home.base];
    home.stateVersion = "22.05";
  };
  home-manager.users.chaos = {
    imports = with tree; [
      home.base
      home.dev.all
      home.home-folders
      home.backup-apps

      home.programming.editors.vscode
      home.programming.languages.rust
      home.programming.languages.nix
    ];
    home.stateVersion = "22.05";
  };

  networking.firewall.enable = true;
  networking.firewall.allowPing = true;

  nix.buildMachines = [
    {
      hostName = "hetzner-vm.servers.genderfucked.monster";
      system = "x86_64-linux";
      sshUser = "root";
      sshKey = "/usb/ssh-keys/chaos.priv";
      publicHostKey = "AAAAC3NzaC1lZDI1NTE5AAAAIMIt2ABqwHhMjz9r6atv4XuX58xEWeStkmXUwvMVGv4w";
      maxJobs = 16;
      speedFactor = 4;
      supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
      mandatoryFeatures = [];
    }
  ];
  nix.distributedBuilds = true; # true;
  nix.extraOptions = "builders-use-substitutes = true";

  networking.hostName = "tablet";
  time.timeZone = "Europe/London";

  system.stateVersion = "22.05";
}