{
	pkgs,
	inputs,
	user,
	constants,
	...
}: {
	imports = [
		./core.nix
		./tailscale.nix
		inputs.sops-nix.nixosModules.sops
	];

	security.sudo.enable = true;

	system.stateVersion = constants.stateVersions.nixos;
	time.timeZone = "UTC";

	nix = {
		settings.trusted-users = ["${user}"];
		gc.dates = "weekly";
		nixPath = ["nixos-config=/home/${user}/.local/share/src/nixos-config:/etc/nixos"];
	};

	boot = {
		loader = {
			systemd-boot = {
				enable = true;
				configurationLimit = 42;
			};
			efi.canTouchEfiVariables = true;
		};
		initrd.availableKernelModules = [
			"xhci_pci"
			"ahci"
			"nvme"
			"usbhid"
			"usb_storage"
			"sd_mod"
		];
		kernelPackages = pkgs.linuxPackages_latest;
	};

	users.users = {
		${user} = {
			isNormalUser = true;
			home = "/home/${user}";
			extraGroups = [
				"wheel"
				"sudo"
				"network"
				"systemd-journal"
				"docker"
			];
			shell = pkgs.fish;
			openssh.authorizedKeys.keys = constants.sshKeys;
		};

		root = {
			openssh.authorizedKeys.keys = constants.sshKeys;
		};
	};

	home-manager = {
		useGlobalPkgs = true;
		users.${user} = {
			pkgs,
			config,
			lib,
			...
		}: {
			_module.args = {inherit user constants inputs;};
			imports = [
				inputs.nixvim.homeModules.nixvim
			];
		};
	};
}