{ config, lib, pkgs, ... }:

{
  config = {
    systemSettings = {
      # users
      users = [ "USERNAME" ];
      adminUsers = [ "USERNAME" ];

      # hardware
      cachy.enable = true;
      bluetooth.enable = true;
      powerprofiles.enable = true;
      tlp.enable = false;
      printing.enable = true;

      # software
      flatpak.enable = false;
      gaming.enable = false;
      virtualization = {
        docker.enable = false;
        virtualMachines.enable = false;
      };
      brave.enable = true;

      # wm
      hyprland.enable = true;

      # dotfiles
      dotfilesDir = "/etc/nixos";

      # security
      security = {
        automount.enable = true;
        blocklist.enable = true;
        doas.enable = true;
        firejail.enable = false; # TODO setup firejail profiles
        firewall.enable = true;
        gpg.enable = true;
        openvpn.enable = true;
        sshd.enable = false;
      };

      # style
      stylix = {
        enable = true;
        theme = "orichalcum";
      };
    };

    users.users.USERNAME.description = "NAME";
    home-manager.users.USERNAME.userSettings = {
      name = "NAME";
      email = "EMAIL";
    };

    ## EXTRA CONFIG GOES HERE

  };
  
}