{ tree, config, pkgs, lib, ... }:

{
  imports = with tree; [
    users.root
    users.chaoticryptidz

    #profiles.hardening
    profiles.tailscale
    profiles.gui
    profiles.laptop
    #profiles.bluetooth
    profiles.pulse
    profiles.network_manager
    profiles.sway
    profiles.dnscrypt
    #profiles.gaming
    # for sci-hub and whenever websites break
    #profiles.tor

    profiles.sshd
  ];

  home-manager.users.root = { imports = with tree; [ home.base ]; };
  home-manager.users.chaoticryptidz = {
    imports = with tree; [
      home.base
      #home.bluetooth
      home.gui
      #home.gaming
      home.dev.all
      home.network_manager
      home.sway
      #home.reversing
      home.apps.vivaldi
      home.apps.telegram
      home.apps.quassel
      #home.apps.osu-lazer
      home.programming
      #home.programming.languages.go
      home.programming.languages.nix
    ];
  };

  boot.binfmt = {
    emulatedSystems = [ "aarch64-linux" ];
    registrations.aarch64-linux = {
      interpreter = lib.mkForce "${pkgs.qemu}/bin/qemu-aarch64";
    };
  };

  services.getty.extraArgs =
    [ "--skip-login" "--login-options" "chaoticryptidz" ];

  networking.firewall.enable = true;
  # let vscode, vivaldi, etc work.
  security.unprivilegedUsernsClone = true;

  networking.hostName = "lappy";
  time.timeZone = "Europe/London";
  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";

  services.fstrim.enable = true;

  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
    initrd.availableKernelModules =
      [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
    kernelModules = [ "kvm-intel" ];
  };

  fileSystems = {
    "/" = {
      device = "/dev/disk/by-label/nixos";
      fsType = "ext4";
    };
    "/boot" = {
      device = "/dev/disk/by-label/nixboot";
      fsType = "vfat";
    };
  };

  system.stateVersion = "21.11";
}