{ config, pkgs, lib, ... }: {

  imports = [

    # todo : remove
    ../../system/all

    ../../components
    ../../modules

    ./hardware-configuration

    ./packages.nix

    ./network-tinc-retiolum.nix # make sure no service is open for this vpn!
    ./network-tinc.nix
    ./network-wireguard.nix

    ./hass-mqtt.nix
    ./hass-zigbee2mqtt.nix
    ./hass.nix

    ./taskwarrior-autotag.nix

    ./media-audiobookshelf.nix
    ./media-castget.nix
    ./media-curl.nix
    ./media-jellyfin.nix
    ./media-share.nix
    ./media-syncthing.nix
    ./media-youtube.nix

    ./telemetry/grafana.nix
    ./telemetry/telegraf-smart.nix
    ./telemetry/telegraf.nix
    #./telemetry/opentelemetry-hass.nix
    ./telemetry/prometheus.nix
    #./telemetry/loki.nix # todo enable this one again

    ./sync-rbackup.nix
    ./sync-syncoid.nix

    ./service-atuin.nix
    ./service-paperless.nix
    ./services-forgejo.nix
    ./services-s3.nix
    ./services-vault.nix

  ];

  components.gui.enable = false;
  components.mainUser.enable = true;
  components.media.tts-server.enable = false;
  components.network.enable = true;
  components.network.wifi.enable = false;
  components.terminal.enable = true;

  components.monitor.enable = true;
  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ];
  networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ];
  components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317";

  services.printing.enable = false;

  #virtualisation.containers.storage.settings = {
  #  # fixes: Error: 'overlay' is not supported over zfs, a mount_program is required: backing file system is unsupported for this graph driver
  #  storage.options.mount_program = "${pkgs.fuse-overlayfs}/bin/fuse-overlayfs";
  #};
  virtualisation.podman.extraPackages = [ pkgs.zfs ]; # make sure /var/lib/containers/storage is a zfs dataset

  sops.defaultSopsFile = ../../secrets/chungus.yaml;

  networking.hostName = "chungus";

  hardware.opengl = {
    enable = true;
    extraPackages = with pkgs; [
      intel-media-driver # LIBVA_DRIVER_NAME=iHD
      vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
      vaapiVdpau
      libvdpau-va-gl
    ];
  };

  # just enable lan
  #networking.dhcpcd.allowInterfaces = [ "enp0s25" ];

  # nix-shell -p speedtest_cli --run speedtest
  #configuration.fireqos = {
  #  enable = false;
  #  interface = "enp0s25";
  #  input = 200000;
  #  output = 2000;
  #  balance = false;
  #};

  system.stateVersion = "23.11";

}