inputs: {
  system = "x86_64-linux";

  modules = [
    ../nixos-modules/default.nix
    inputs.home-manager.nixosModules.home-manager
    ({ pkgs, config, secret, ... }: {
      home-manager.users."main" =
        { ... }: {
          imports = [ ../home-manager/modules/default.nix ];

          magic_rb = {
            optimisation.march = "skylake";
            pins = inputs;
            config = {
              allowUnfree = true;
            };
            overlays = inputs.self.overlays;

            programs = {
              alacritty.enable = true;
              bash = {
                enable = true;
                enableDirenv = true;
              };
              ssh.enable = true;
              emacs.enable = true;
              xmonad.enable = true;
              gpg.enable = true;
              multimc.enable = false;
            };
            packageCollections = {
              "3dPrinting".enable = false;
              cmdline.enable = true;
              graphical.enable = true;
              rust.enable = true;
              webdev.enable = false;
              wine.enable = false;
            };
          };

          home.stateVersion = "20.09";
        };

      services.vault-agent = {
        enable = true;
        settings = {
          vault = {
            address = "https://${secret.network.ips.vault.dns}:8200";

            client_cert = "/etc/vault-agent/client.crt";
            client_key = "/etc/vault-agent/client.key";
          };

          auto_auth = {
            method = [
              {
                "cert" = {
                  name = "system-omen";
                };
              }
            ];
          };

          template = [
            {
              source = pkgs.writeText "wg0.key.tpl" ''
                {{ with secret "kv/data/systems/omen/wireguard" }}{{ .Data.data.private_key }}{{ end }}
              '';
              destination = "/var/secrets/wg0.key";
            }
          ];
        };
      };

      magic_rb = {
        optimisation.march = "skylake";

        grub = {
          enable = true;
          efi.enable = true;
        };

        xserver = {
          enable = true;
          gpu = "nvidia";
          xmonad = true;

          nvidia = {
            prime = true;

            intelBusId = "PCI:0:2:0";
            nvidiaBusId = "PCI:1:0:0";
          };

          qwertyNeo2 = true;
          mimickInTty = true;
        };

        pins = inputs;
        config = {
          allowUnfree = true;
        };
        overlays = inputs.self.overlays;

        hardware.omen = true;
        flakes.enable = true;
        pulseaudio.enable = true;
        sshdEmacs.enable = true;
        networking = {
          bluetooth = true;
          networkManager = true;
        };
      };

      programs.steam.enable = true;

      services.openssh = {
        enable = true;
      };

      networking = {
        hostName = "omen";
        useDHCP = false;
        interfaces.eno1.useDHCP = true;
        hostId = "10c7ffc5";

        wireguard.interfaces."wg0" = {

        } // config.magic_rb.secret.wireguard."omen";
      };

      security.pki.certificates = [ (builtins.readFile ../redalder.org.crt) ];

      virtualisation.podman = {
        enable = true;
        dockerCompat = true;
      };

      time.timeZone = "Europe/Bratislava";
      system.stateVersion = "20.09";
    })
  ];
}