{
  lib,
  modulesPath,
  user,
  ...
}: {
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    ./ddc.nix
    ./g920.nix
  ];

  boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod"];
  boot.initrd.kernelModules = ["uas" "usbcore" "usb_storage" "vfat" "nls_cp437" "nls_iso8859_1"];
  boot.kernelModules = ["kvm-amd"];
  boot.extraModulePackages = [];

  fileSystems."/" = {
    device = "/dev/mapper/cryptroot";
    fsType = "btrfs";
    options = ["subvol=@" "compress=zstd" "autodefrag"];
  };

  fileSystems."/nix" = {
    device = "/dev/disk/by-label/nix";
    fsType = "f2fs";
    neededForBoot = true;
    options = ["noatime"];
  };

  boot.initrd.luks.devices."cryptroot" = {
    device = "/dev/disk/by-uuid/cc0617df-8cbf-4618-abbc-df64c96de151";
  };

  fileSystems."/home" = {
    device = "/dev/mapper/cryptroot";
    fsType = "btrfs";
    options = ["subvol=@home" "compress=zstd" "autodefrag"];
  };

  fileSystems."/boot" = {
    device = "/dev/disk/by-label/boot";
    fsType = "vfat";
  };

  fileSystems."/mnt/hdd" = {
    device = "/dev/disk/by-label/seagate-disk-1";
    fsType = "btrfs";
    options = ["subvol=@steam" "compress=zstd" "autodefrag"];
  };

  boot.plymouth.enable = true;

  swapDevices = [{device = "/dev/disk/by-label/swap";}];

  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
  # still possible to use this option, but it's recommended to use it in conjunction
  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
  networking.useDHCP = lib.mkDefault true;
  # networking.interfaces.enp5s0.useDHCP = lib.mkDefault true;

  networking.networkmanager.appendNameservers = ["1.1.1.1" "1.0.0.1"];

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  hardware.cpu.amd.updateMicrocode = true;
  hardware.cpu.x86.msr.enable = true;

  networking.hostName = "zenix";

  services.openssh.enable = true;

  networking.firewall.checkReversePath = "loose";

  system.stateVersion = "22.11"; # do not change

  home-manager.users.${user}.imports = [
    {
      home.stateVersion = "22.05";
      programs.niri.settings.outputs = {
        "DP-3" = {
          mode = {
            width = 1920;
            height = 1080;
            refresh = 143.855;
          };
          variable-refresh-rate = true;
          scale = 1.0;
        };
        "HDMI-A-1" = {
          mode = {
            width = 3840;
            height = 2160;
            refresh = 120.0;
          };
          variable-refresh-rate = true;
          scale = 2.5;
        };
      };
    }
  ];
}