{ config, lib, pkgs, ... }:

{

  imports = [
    ./hardware-configuration.nix
    ../../configurations/linux/gnome.nix
    ./keyboard.nix
  ];

  deployment.allowLocalDeployment = true;

  ctucxConfig.monitoring.exporters.enable = true;

  boot = {
    loader.systemd-boot.enable = lib.mkForce false;
    loader.efi.canTouchEfiVariables = true;

    lanzaboote = {
      enable = true;
      pkiBundle = "/etc/secureboot";
    };

    kernelPackages = pkgs.linuxPackages_latest;
  };

  nix.gc.automatic = lib.mkForce false;

  services = {
    openssh.enable = true;
    fprintd.enable = true;
    fwupd.enable   = true;
  };

  system.stateVersion = "24.11";
  home-manager.users.katja.home.stateVersion = "24.11";
}