{ config, pkgs, lib, ... }: {

  imports = [

    # todo : remove
    ../../system/all

    ./hardware-configuration

    ./packages.nix

    ./network-tinc-retiolum.nix # make sure no service is open for this vpn!
    ./network-tinc.nix
    ./network-wireguard.nix

    ./hass-mqtt.nix
    ./hass-zigbee2mqtt.nix
    ./hass.nix

    # todo: add autotag again
    #./taskwarrior-autotag.nix

    ./media-audiobookshelf.nix
    ./media-castget.nix
    ./media-curl.nix
    ./media-jellyfin.nix
    ./media-navidrome.nix
    ./media-share.nix
    ./media-syncthing.nix
    ./media-youtube.nix

    ./telemetry/grafana.nix
    ./telemetry/telegraf-smart.nix
    ./telemetry/telegraf.nix
    ./telemetry/prometheus.nix
    ./telemetry/loki.nix # todo enable this one again

    ./sync-rbackup.nix
    ./sync-syncoid.nix

    ./service-atuin.nix
    ./service-paperless.nix
    ./services-forgejo.nix
    ./services-s3.nix
    ./services-vault.nix

    ./zerotier-controller.nix

  ];

  components.gui.enable = false;
  components.mainUser.enable = true;
  components.media.tts-server.enable = false;
  components.network.enable = true;
  components.network.wifi.enable = false;
  components.terminal.enable = true;

  features.boot.ssh.kernelModules = [ "e1000e" ];

  components.monitor.enable = true;
  components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317";
  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ];
  networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ];

  services.printing.enable = false;

  virtualisation.podman.extraPackages = [ pkgs.zfs ]; # make sure /var/lib/containers/storage is a zfs dataset

  networking.hostName = "chungus";


  hardware.graphics.enable = true;
  hardware.graphics.enable32Bit = true;
  hardware.graphics.extraPackages = with pkgs; [
    intel-media-driver # LIBVA_DRIVER_NAME=iHD
    vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
    vaapiVdpau
    libvdpau-va-gl
  ];

  # nix-shell -p speedtest_cli --run speedtest
  #configuration.fireqos = {
  #  enable = false;
  #  interface = "enp0s25";
  #  input = 200000;
  #  output = 2000;
  #  balance = false;
  #};

  system.stateVersion = "23.11";

}