{lib, ...}:
with lib; {
  nixfiles.modules = {
    wireguard.client.enable = true;

    acme.enable = true;

    k3s.enable = false;
  };

  boot = {
    loader = {
      efi.canTouchEfiVariables = true;

      systemd-boot = {
        enable = true;
        configurationLimit = 10;
      };
    };

    initrd.availableKernelModules = [
      "virtio_pci"
      "virtio_scsi"
    ];
  };

  fileSystems = {
    "/" = {
      device = "/dev/disk/by-uuid/b07e8273-915a-424c-8c55-cdc2bd482f49";
      fsType = "xfs";
      options = ["noatime"];
    };

    "/boot" = {
      device = "/dev/disk/by-uuid/03FD-B6C0";
      fsType = "vfat";
    };
  };

  swapDevices = [
    {
      device = "/swapfile";
      size = 4 * 1024;
    }
  ];

  zramSwap = {
    enable = true;
    memoryPercent = 25;
  };
}