{lib, ...}:
with lib; {
  nixfiles.modules = {
    wireguard.client.enable = true;

    acme.enable = true;

    k3s.enable = false;
  };

  boot = {
    loader = {
      efi.canTouchEfiVariables = true;

      systemd-boot = {
        enable = true;
        configurationLimit = 10;
      };
    };

    initrd.availableKernelModules = [
      "virtio_pci"
      "virtio_scsi"
    ];

    # https://github.com/NixOS/nixpkgs/issues/89025
    # https://forum.netcup.de/administration-of-a-server-vserver/vserver-server-kvm-server/p67571-icmpv6-ra-ndisc-router-discovery-failed-to-add-default-route/#post67571
    # https://superuser.com/questions/33196/how-to-disable-autoconfiguration-on-ipv6-in-linux
    kernel.sysctl = {
      "net.ipv6.conf.all.autoconf" = 0;
      "net.ipv6.conf.all.accept_ra" = 0;
    };
  };

  fileSystems = {
    "/" = {
      device = "/dev/disk/by-uuid/b07e8273-915a-424c-8c55-cdc2bd482f49";
      fsType = "xfs";
      options = ["noatime"];
    };

    "/boot" = {
      device = "/dev/disk/by-uuid/03FD-B6C0";
      fsType = "vfat";
    };
  };

  swapDevices = [
    {
      device = "/swapfile";
      size = 4 * 1024;
    }
  ];

  zramSwap = {
    enable = true;
    memoryPercent = 25;
  };
}