{ config, inputs, ... }: {
  imports = [
    ./hardware-configuration.nix
    inputs.self.nixosRoles.desktop
    inputs.self.nixosProfiles.print-scan
    inputs.self.nixosProfiles.aws
  ];
  deviceSpecific.devInfo = {
    cpu = {
      vendor = "amd";
      clock = 4200;
      cores = 8;
    };
    drive = {
      type = "ssd";
      speed = 6000;
      size = 250;
    };
    bigScreen = true;
    ram = 32;
  };
  deviceSpecific.isHost = true;
  services.apcupsd.enable = true;
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  secrets.wireguard-wg0 = { };

  environment.sessionVariables.WINEPREFIX = "/home/balsoft/.local/share/wineprefixes/default";

  persist = {
    enable = true;
    cache.clean.enable = false; # Scary...

    state.directories = [ "/home/balsoft/.local/share/Steam" ];

    derivative.directories = [ "/home/balsoft/.local/share/wineprefixes/default" ];
  };

  services.ezwg = {
    enable = true;
    proxy = true;
    lanSize = 32;
    serverIP = "95.217.152.163";
    serverPort = 35944;
    serverKey = "sgLUARawWJejANs2CwuCptwJO55c4jkmnP0L14FNCyw=";
    privateKeyFile = config.secrets.wireguard-wg0.decrypted;
    vlanIP = "172.20.0.52";
  };

  # restart when the service fails to resolve DNS
  systemd.services.wireguard-serokell.serviceConfig = {
    Restart = "on-failure";
    RestartSec = "30s";
  };
}