{ pkgs, lib, username, ... }:

{
	imports = [ ./hardware-configuration.nix ./services.nix ];

	networking.hostName = "laptop";
	networking.networkmanager.enable = true;

	networking.firewall.enable = true;
	networking.firewall.allowedTCPPorts = [ ];
	networking.firewall.allowedUDPPorts = [ 51820 ];

	security.pki.certificateFiles = [ "/root/ominous-law.local.crt" ];

	hardware.bluetooth.enable = true;

	boot.loader = {
		systemd-boot.enable = true;
		efi = {
			canTouchEfiVariables = true;
			efiSysMountPoint = "/boot";
		};
	};
		
	boot.initrd.secrets."/crypto_keyfile.bin" = null;

	services.power-profiles-daemon.enable = false;
	services.thermald.enable = true;
	services.tlp = {
		enable = true;
		settings = {
			CPU_SCALING_GOVERNOR_ON_AC = "performance";
			CPU_SCALING_GOVERNOR_ON_BAT = "powersave";

			CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
			CPU_ENERGY_PERF_POLICY_ON_BAT = "power";

			CPU_MIN_PERF_ON_AC = 0;
			CPU_MAX_PERF_ON_AC = 100;
			CPU_MIN_PERF_ON_BAT = 0;
			CPU_MAX_PERF_ON_BAT = 40;
		};
	};
}