{pkgs, ...}: let
  vuescan = pkgs.callPackage ../common/optional/vuescan.nix {};
  epsonscan2 = pkgs.epsonscan2.override {withNonFreePlugins = true;};
in {
  imports = [
    ./hardware-configuration.nix

    ../common/global
    ../common/users/lander

    ../common/optional/fonts.nix
    ../common/optional/yubikey-gpg.nix
    ../common/optional/virt.nix
  ];

  networking = {
    hostName = "wodan";
    networkmanager.enable = true;
  };

  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };

    initrd.luks.devices."luks-ed2282ac-fd73-4d82-9224-b7596b5b7cac".device = "/dev/disk/by-uuid/ed2282ac-fd73-4d82-9224-b7596b5b7cac";
  };

  services.xserver.enable = true;
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };

  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    jack.enable = true;
  };

  nixpkgs.config.allowUnfree = true;

  environment.systemPackages = with pkgs; [
    (firefox.override {extraNativeMessagingHosts = [passff-host];})
    vim
    wget
    git
    texliveFull
    terraform
    tf-summarize
    awscli2
    libreoffice
    x32edit
    epsonscan2
    vuescan
  ];

  nix.settings.experimental-features = ["nix-command" "flakes"];

  services.tailscale.enable = true;

  services.printing.enable = true;
  services.printing.drivers = [pkgs.brlaser];

  hardware.sane.enable = true;
  hardware.sane.extraBackends = [
    pkgs.epkowa
    pkgs.utsushi
    pkgs.epsonscan2
  ];
  services.udev.packages = [
    pkgs.utsushi
    vuescan
  ];

  system.stateVersion = "24.05";
}