{
  pkgs,
  config,
  hardware,
  diskoConfigurations,
  ...
}:
{
  # nix boilerplate
  system.stateVersion = "24.11";
  networking.hostName = "dragon";

  # kernel and bootloader configuration
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader.efi.canTouchEfiVariables = true;
    loader.systemd-boot.enable = true;
    initrd.availableKernelModules = [
      "xhci_pci"
      "nvme"
      "ahci"
      "usbhid"
    ];
    kernelModules = [ "kvm-amd" ];
    supportedFilesystems = [ "ntfs" ];
  };

  # hardware configuration
  imports = with hardware; [
    (diskoConfigurations.unencrypted { disk = "/dev/nvme0n1"; })
    common-cpu-amd
    common-gpu-amd
    common-pc-ssd
  ];
  hardware.bluetooth.enable = true;
  networking.wifi.enable = true;
  powerManagement.cpuFreqGovernor = "performance";

  # application and services configuration

  lyte.desktop.enable = true;

  sops = {
    defaultSopsFile = ../../secrets/dragon/secrets.yml;
    secrets.ddns-pass.mode = "0400";
  };
  services.deno-netlify-ddns-client = {
    passwordFile = config.sops.secrets.ddns-pass.path;
    enable = true;
    username = "dragon.h";
    # TODO: router doesn't even do ipv6 yet...
    ipv6 = false;
  };

  home-manager.users.daniel = {
    slippi-launcher = {
      enable = true;
      isoPath = "${config.users.users.daniel.home}/../games/roms/dolphin/melee.iso";
      launchMeleeOnPlay = false;
    };
  };
}