{ config, pkgs, ... }:
{
  # [HARDWARE]
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];
  hardware.opengl = {
    enable = true;
    driSupport = true;
    driSupport32Bit = true;
    extraPackages = with pkgs; [
      intel-ocl
      intel-compute-runtime
      intel-media-driver
      vaapiIntel
      vaapiVdpau
      libvdpau-va-gl
    ];
  };
  hardware.bluetooth.enable = true;
  services.logind = {
    lidSwitch = "hibernate";
    lidSwitchDocked = "ignore";
    lidSwitchExternalPower = "hibernate";
  };
  services.udev.extraRules = ''
    KERNEL=="0000:00:14.0", SUBSYSTEM=="pci", ATTR{power/wakeup}="disabled"
  '';

  # [BOOT / DISK ENCRYPTION]
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.grub = {
    enable = true;
    device = "nodev";
    efiSupport = true;
    enableCryptodisk = true;
    theme = ../shared/sayonara;
  };

  boot.loader.efi.efiSysMountPoint = "/boot/efi";
  boot.initrd = {
    availableKernelModules = [ "aesni_intel" "cryptd" ];
    secrets = { "/boot/key" = "/boot/key"; };
    luks.mitigateDMAAttacks = true;
    luks.devices = {
      root = {
        device = "/dev/disk/by-uuid/91114176-b6cc-4454-89df-e2bf5c1fac0a";
        keyFile = "/boot/key";
        preLVM = true;
      };
    };
  };

  # [NETWORKING]
  networking.hostName = "lambda";
  networking.networkmanager = {
    enable = true;
    wifi.powersave = true;
    wifi.scanRandMacAddress = true;
    wifi.macAddress = "random";
  };

  system.stateVersion = "23.11";
}