{ pkgs, lib, username, ... }:

{
	imports = [ ./hardware-configuration.nix ./services.nix ];

	networking.hostName = "desktop";
	networking.networkmanager.enable = true;

	networking.firewall.enable = true;
	networking.firewall.allowedTCPPorts = [ ];
	networking.firewall.allowedUDPPorts = [ ];

	hardware.bluetooth.enable = false;

	boot.loader = {
		systemd-boot.enable = true;
		efi = {
			canTouchEfiVariables = true;
			efiSysMountPoint = "/boot";
		};
	};

	boot.initrd = {
		secrets."/crypto_keyfile.bin" = null;
		luks.devices."luks-3d0f669d-7bb4-49e4-abe2-03872cc1d507" = {
			device = "/dev/disk/by-uuid/3d0f669d-7bb4-49e4-abe2-03872cc1d507";
			keyFile = "/crypto_keyfile.bin";
		};
	};
}