{ pkgs, ... }: {

  console = { font = "Lat2-Terminus16"; keyMap = "it"; };

  environment = {
    pathsToLink = [ "/share/zsh" ];
    systemPackages = builtins.attrValues { inherit (pkgs) helix tmux vim; };
  };

  hardware = {
    bluetooth = { enable = true; package = pkgs.bluezFull; };
    opengl = { enable = true; driSupport = true; };
    raspberry-pi."4" = {
      audio.enable = true;
      fkms-3d.enable = true; # GPU
    };
  };

  i18n.defaultLocale = "it_IT.UTF-8";

  networking.hostName = "freya";
  networking.firewall.allowedTCPPorts = [ 80 ];

  programs = {
    dconf.enable = true;
    gnupg.agent = { enable = true; enableSSHSupport = true; };
    zsh = { enable = true; syntaxHighlighting.enable = true; };
  };

  security.sudo.extraConfig = ''
    Defaults pwfeedback
  '';

  services = {
    avahi = {
      enable = true;
      openFirewall = true;
      nssmdns = true;
      publish = {
        enable = true;
        addresses = true;
        domain = true;
        userServices = true;
        workstation = true;
      };
      extraServiceFiles.ssh = "${pkgs.avahi}/etc/avahi/services/ssh.service";
    };
    blueman.enable = true;
    dbus.packages = [ pkgs.dconf ];
    gnome.gnome-keyring.enable = true;
    # nextcloud = {
    #   enable = true;
    #   hostName = "freya.local";
    #   config.adminpassFile = config.age.secrets.nextcloud_admin_secret.path;
    #   config.objectstore.s3 = {
    #     enable = true;
    #     bucket = "nextcloud-bucket";
    #     autocreate = false;
    #     key = "GK42a6b774429bfc254f4a5d36";
    #     secretFile = config.age.secrets.nextcloud_bucket_secret.path;
    #     hostname = "localhost";
    #     port = 3900;
    #     useSsl = false;
    #     region = "garage";
    #     usePathStyle = true;
    #   };
    # };
    openssh = { enable = true; openFirewall = true; };
    # xserver = {
    #   enable = true;
    #   desktopManager.retroarch = { enable = true; package = pkgs.retroarchFull; };
    # };
  };

  time.timeZone = "Europe/Rome";

  users.users = {
    bertof = {
      isNormalUser = true;
      extraGroups = [
        "audio"
        "input"
        "docker"
        "libvirtd"
        "network"
        "networkmanager"
        "usb"
        "video"
        "wheel"
      ];
      shell = pkgs.zsh;
    };
  };

  system.stateVersion = "22.11";
}