{ pkgs, lib, username, ... }: { imports = [ ./hardware-configuration.nix ./services.nix ]; networking.hostName = "laptop"; networking.networkmanager.enable = true; networking.firewall.enable = true; networking.firewall.allowedTCPPorts = [ ]; networking.firewall.allowedUDPPorts = [ ]; hardware.bluetooth.enable = true; boot.loader = { systemd-boot.enable = true; efi = { canTouchEfiVariables = true; efiSysMountPoint = "/boot"; }; }; boot.initrd.secrets."/crypto_keyfile.bin" = null; }