{
  config,
  pkgs,
  lib,
  ...
}:
{

  imports = [

    ./hardware-configuration.nix
    ./packages.nix
    ./syncthing.nix
    ./tinc.nix

  ];

  networking.hostName = "sternchen";
  system.stateVersion = "23.11";

  # for calibre server
  networking.firewall.allowedTCPPorts = [ 8080 ];

  components.gui.enable = true;
  components.gui.kmonad.enable = false;

  components.terminal.enable = true;
  components.network.enable = true;
  components.network.wifi.enable = true;
  components.mainUser.enable = true;

  users.users.mainUser.extraGroups = [ "video" ];

  home-manager.users.mainUser.home.git-pull.enable = false;

  users.users.mainUser.name = lib.mkForce "tina";
  users.users.mainUser.home = lib.mkForce "/home/tina";

  services.browser.enable = false;

  #security.wrappers = {
  #  pmount = {
  #    source = "${pkgs.pmount}/bin/pmount";
  #    setuid = true;
  #    owner = "root";
  #    group = "root";
  #  };
  #  pumount = {
  #    source = "${pkgs.pmount}/bin/pumount";
  #    setuid = true;
  #    owner = "root";
  #    group = "root";
  #  };
  #};

  # keyboard fiddling
  i18n.defaultLocale = "de_DE.UTF-8";
  console.keyMap = "de";
  services.xserver.xkb.layout = "de,us";

  #system.custom.suspend.enable = false;
  services.printing.enable = false;

  hardware.graphics.enable = true;
  hardware.graphics.enable32Bit = true;

  services.displayManager.defaultSession = "plasma";

  services.xserver.desktopManager.pantheon.enable = false;
  services.xserver.desktopManager.xfce.enable = false;
  services.xserver.desktopManager.gnome.enable = false;

  services.xserver.desktopManager.cinnamon.enable = true;
  services.xserver.desktopManager.lxqt.enable = true;
  services.xserver.desktopManager.mate.enable = true;

  services.xserver.desktopManager.plasma5.enable = true;
  services.xserver.desktopManager.plasma5.phononBackend = "vlc";

  # stuff
  # -----
  samba-share = {
    enable = false;
    folders = {
      share = "/home/share";
    };
  };

}