{
  pkgs,
  lib,
  vars,
  ...
}:
{
  imports = [
    ./hardware-configuration.nix
    (import ../../../../modules/system/nixos/headless/disko.nix {
      device = "/dev/nvme0n1";
      resumeOffset = "533760";
      swapSize = "16G";
      isSsd = true;
    })
    ../../../../modules/system/nixos/common
    ../../../../modules/system/nixos/graphical
    ../../../../modules/system/nixos/graphical/android.nix
    ../../../../modules/system/nixos/graphical/optional/bambu-studio.nix
    ../../../../modules/system/nixos/graphical/optional/bluetooth.nix
    ../../../../modules/system/nixos/graphical/optional/dolphin-emu.nix
    ../../../../modules/system/nixos/graphical/optional/steam.nix
    ../../../../modules/system/nixos/graphical/optional/virt-manager.nix
    ../../../../modules/system/nixos/graphical/optional/wifi.nix
    ../../../../modules/system/nixos/headless/optional/btrbk.nix
    ../../../../modules/system/nixos/headless/optional/dev-ports.nix
    ../../../../modules/system/nixos/headless/optional/secure-boot.nix
    ../../../../modules/system/nixos/headless/optional/syncthing.nix
    ../../../../modules/system/nixos/headless/optional/tailscale.nix
    ../../../../modules/system/nixos/headless/optional/thunderbolt.nix
  ];

  home-manager.users.${vars.userName} = {
    imports = [
      ../../../../modules/home-manager/nixos/graphical
      ../../../../modules/home-manager/nixos/graphical/optional/react-native-debugger.nix
      ../../../../modules/home-manager/nixos/headless/optional/playwright.nix
    ];
  };

  # To get to secure-boot setup mode in bios: Security -> Custom -> Clear. You need to exit the bios without the machine restarting. Do not 'exit and reset', quit the bios without saving (back on far right hand side), which contiues boot.

  # Faster boot loader
  boot.loader.timeout = lib.mkForce 3;

  boot.extraModprobeConfig = "options kvm_amd nested=1";

  # specific UM790 fix to prevent reboots when running idle
  # https://wiki.archlinux.org/title/Ryzen#Freeze_on_shutdown,_reboot_and_suspend
  boot.kernelParams = [
    "processor.max_cstate=1"
    "idle=nowait"

    # UM790/Linux NVMe dropouts: disable NVMe APST to avoid storage link wake failures.
    # This it to mitigate weird crashes where the machine was no longer working
    # BTRFS error (device dm-0 state EA): bdev /dev/mapper/cryptroot errs: wr 831, rd 412xxx, flush 1, corrupt 0, gen 0
    "nvme_core.default_ps_max_latency_us=0"
  ];

  # WiFi/Bluetooth firmware support for UM790
  hardware.firmware = with pkgs; [
    linux-firmware
  ];

  # Don't use thunderbolt ethernet
  networking.networkmanager.unmanaged = [ "enp100s0" ];
  networking.interfaces.enp100s0.useDHCP = lib.mkForce false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "25.05"; # Did you read the comment?
}