{...}: {
  imports = [
    ../../system
    ./hardware-configuration.nix
  ];

  networking.hostName = "hebesu";
  services.tzupdate.enable = true;
  services.power-profiles-daemon.enable = false;
  services.auto-cpufreq.enable = true;
  services.auto-cpufreq.settings = {
    charger = {
      governor = "powersave";
      turbo = "auto";
    };
  };
  services.xserver = {
    videoDrivers = ["modesetting"];
    deviceSection = ''
      Option "DRI" "2"
      Option "TearFree" "true"
    '';
    xkb.options = "ctrl:nocaps";
  };
  users.users.ahnwuoa = {
    isNormalUser = true;
    extraGroups = ["wheel" "podman"];
  };
  networking.firewall = {
    logReversePathDrops = true;
    extraCommands = ''
      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
    '';
    extraStopCommands = ''
      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
    '';
  };
  services.tailscale.enable = true;
}