{
    config,
    pkgs,
    ...
}: {
    nixpkgs.config = {
        permittedInsecurePackages = [
            "olm-3.2.16"
        ];
        allowUnfree = true;
    };

    systemd.oomd = {
        enable = true;
        enableUserServices = true;
    };

    programs.dconf.enable = true;

    security.sudo.package = pkgs.sudo.override { withInsults = true; };

    programs.zsh.enable = true;

    environment.sessionVariables = {
        CHROME_EXECUTABLE = "${pkgs.ungoogled-chromium}/bin/chromium";
    };

    services = {
        pcscd.enable = true;

        udev.packages = [ pkgs.yubikey-personalization ];

        udisks2.enable = true;
    };

    hardware.graphics = {
        enable = true;
        driSupport = true;
        enable32Bit = true;
    };

    services.journald = {
        extraConfig = ''
            SystemMaxUse=100M
        '';
    };

    poz = {
        other = {
            home-manager = {
                enable = true;
                enableDirenv = true;
            };
            networking.enable = true;
        };
        programs = {
            agenix.enable = true;
            nh = let
                inherit (config.poz.other.system) username;
                home = config.home-manager.users.${username}.home.homeDirectory;
            in {
                enable = true;
                flake = "${home}/niksos";
            };
            starship.enable = true;
            zsh = {
                enable = true;
                extraAliases = {
                    u = "nh os switch -H hape";
                    us = "NIX_SSHOPTS='-t' nixos-rebuild switch --flake \"/home/jacek/niksos#chmura\" -L --use-remote-sudo --target-host chmura";
                    # TODO use this when nh supports it
                    #us = "NIX_SSHOPTS='-t' nh os switch -H chmura -- --store ssh-ng://chmura";
                };
                profiling = false;
            };
            zoxide.enable = true;
            anyrun.enable = true;
            btop.enable = true;
            foot.enable = true;
            mpv.enable = true;
            neovim.enable = true;
            zathura.enable = true;
            hypr = {
                land.enable = true;
                lock.enable = true;
                idle.enable = true;
            };
            quickshell = {
                enable = true;
                enabledConfigs = [
                    "powermenu"
                    "poz"
                ];
            };
        };
        services = {
            dunst.enable = true;
            greetd = {
                enable = true;
                greeter = "gtkgreet";
                launchOptions = [
                    "Hyprland"
                    "zsh"
                    "reboot"
                    "shutdown now"
                ];
            };
            mpd.enable = true;
            pipewire.enable = true;
        };
    };

    system.stateVersion = "23.11";
}