{
# An instance of `pkgs` with your overlays and packages applied is also available.
pkgs, inputs, ... }: {
  imports = [ # Include the results of the hardware scan.
    ./hardware-configuration.nix
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480
  ];

  # basic setup
  time.timeZone = "Asia/Kolkata";
  networking = {
    hostName = "apollo";
    firewall = {
      enable = true;
      allowedTCPPorts = [
        53317 # localsend
      ];
      allowedUDPPorts = [
        53317 # localsend
      ];
      allowedTCPPortRanges = [
        # KDE Connect
        {
          from = 1714;
          to = 1764;
        }
      ];
    };
  };

  snowflake = {
    locale = "en_US.UTF-8";
    # Bhur@108

    extraPackages = with pkgs; [ firefox ungoogled-chromium ];
    core = {
      openssh.enable = true;
      latestKernel = true;
      gc = true;
    };

    networking = {
      networkmanager = { enable = true; };
      netbird = { enable = true; };
    };

    hardware = {
      isEfi = true;
      xbootldrMountPoint = "/boot";
      efiSysMountPoint = "/efi";
      diskDevice = "/dev/nvme0n1";
      isInitrdLuksUnlockingEnabled = true;
    };

    workstation = {
      enable = true;
      desktop = {
        enable = true;
        autoLoginUser = "girish";
      };
      isOfficeMachine = true;
      networking.profiles.enable = true;
    };

    user = {
      enable = true;
      users = {
        girish = {
          isNormalUser = true;
          shell = pkgs.bash;
          description = "Girish Shenoy";
          extraGroups = [
            "audio"
            "networkmanager" # for modifying WiFi without sudo
            "input"
          ];
          initialHashedPassword =
            "$2b$10$2WDIg5cJVcAUhUNLdDOC2.jgh81Xdgbj.mtrdVDs/3qWSk/LlSPYC";
          authorizedKeys = [
            "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJnFvU6nBXEuZF08zRLFfPpxYjV3o0UayX0zTPbDb7C eden-thinkpad-zephyrus-cell"
          ];
        };
        cc = {
          isNormalUser = true;
          shell = pkgs.bash;
          description = "Ameya Shenoy";
          extraGroups = [
            "wheel" # for sudo access
            "audio"
            "networkmanager" # for modifying WiFi without sudo
            "input"
          ];
          initialHashedPassword =
            "$y$j9T$cfmQcJ67WPKPEhsIbH2aC.$m8bDYq5dZrfx8NdU57jKbRc1nFuSB7iKdnAka6/u9R0";
          authorizedKeys = [
            "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJnFvU6nBXEuZF08zRLFfPpxYjV3o0UayX0zTPbDb7C eden-thinkpad-zephyrus-cell"
          ];
        };
      };
    };
  };

  system.stateVersion = "24.05";
}