{
  inputs,
  outputs,
  ...
}:

{
  imports = [
    ./boot.nix
    ./hardware.nix
    ./packages.nix
    ./secrets
    ./virtualisation.nix
    # ./winapps.nix # trying windows-oci for now
    # ./wireguard.nix # TODO: use NM for client config

    ../../users/sid

    inputs.synix.nixosModules.common
    inputs.synix.nixosModules.device.laptop
    inputs.synix.nixosModules.hyprland
    inputs.synix.nixosModules.i2pd
    inputs.synix.nixosModules.openssh
    inputs.synix.nixosModules.windows-oci

    # outputs.nixosModules.anything-llm-oci
    outputs.nixosModules.appimage
    outputs.nixosModules.common
    # outputs.nixosModules.docker # conflicts with `virtualisation.podman.dockerCompat`
    outputs.nixosModules.docs
    outputs.nixosModules.syncthing
    outputs.nixosModules.tailscale
    outputs.nixosModules.wine
  ];

  networking.hostName = "16ach6";

  services = {
    envfs.enable = true;
    i2pd.enable = true;
    openssh.enable = true;
    windows-oci = {
      # enable = true; # FIXME
      sharedVolume = "/home/sid/pub";
    };
  };

  boot.binfmt.emulatedSystems = [
    "aarch64-linux"
  ];

  virtualisation.waydroid.enable = true;
  # sudo waydroid init
  # sudo systemctl enable --now waydroid-container.service
  # waydroid session start
  # waydroid app launch com.foo.bar

  normalUsers = {
    sid = {
      extraGroups = [
        "audio"
        "dialout"
        "floppy"
        "input"
        "lp"
        "networkmanager"
        "video"
      ];
    };
  };

  programs.steam.enable = true;

  boot.enableContainers = true;

  system.stateVersion = "24.11";
}