{ config, lib, pkgs, ... }: {
  imports = [
    ../../configs/retiolum.nix
  ];

  krebs.build.host = config.krebs.hosts.querel;
  krebs.build.user = lib.mkForce config.krebs.users.itak;

  boot.initrd.availableKernelModules = [ "ahci" ];
  boot.initrd.luks.devices.querel-luks1 = {
    allowDiscards = true;
    device = "/dev/sda2";
  };
  boot.loader = {
    efi.canTouchEfiVariables = true;
    systemd-boot.enable = true;
  };

  environment.systemPackages = [
    pkgs.firefox
    pkgs.gimp
    pkgs.kdePackages.kate
    pkgs.libreoffice
    pkgs.nsxiv
    pkgs.zathura
  ];

  fileSystems = {
    "/" = {
      device = "/dev/mapper/querel-root";
      fsType = "ext4";
      options = [ "defaults" "discard" ];
    };
    "/home" = {
      device = "/dev/mapper/querel-home";
      fsType = "ext4";
      options = [ "defaults" "discard" ];
    };
    "/boot" = {
      device = "/dev/sda1";
    };
  };

  hardware.cpu.intel.updateMicrocode = true;
  hardware.enableRedistributableFirmware = true;

  i18n.defaultLocale = "de_DE.UTF-8";

  networking.networkmanager.enable = true;

  programs.ssh.startAgent = false;

  services.xserver.enable = true;
  services.xserver.xkb.layout = "de";
  services.xserver.xkb.options = "eurosign:e";

  services.desktopManager.plasma6.enable = true;

  services.displayManager.autoLogin.user = "itak";
  services.displayManager.defaultSession = "plasma";

  users.users.itak = {
    inherit (config.krebs.users.itak) home uid;
    isNormalUser = true;
    extraGroups = [
      "audio"
      "video"
      "networkmanager"
    ];
  };

  system.stateVersion = "25.11";
}