{
  config,
  lib,
  pkgs,
  inputs,
  ...
}:

{
  imports = [
    # Include the results of the hardware scan.
    ./hardware-configuration.nix
    ../../modules/common.nix
    ../../modules/llm.nix
    # ../../modules/local-llm.nix
    ../../modules/kvm.nix
    ../../modules/wireguard.nix
  ];

  boot.loader.grub = {
    enable = true;
    device = "nodev";
    efiSupport = true;
  };
  boot.loader.efi.canTouchEfiVariables = false;
  boot.loader.efi.efiSysMountPoint = "/boot/efi";

  networking.hostName = "desktop";
  networking.wireless.iwd.enable = true;
  networking.wireless.iwd.settings = {
    General.EnableNetworkConfiguration = true;
  };
  networking.nameservers = [
    "1.1.1.1"
    "8.8.8.8"
  ];

  services.xserver.videoDrivers = [ "amdgpu" ];

  networking.firewall.extraCommands = ''
    iptables -t nat -A PREROUTING -p tcp --dport 3389 -j DNAT --to 192.168.111.111:3389
    iptables -I FORWARD -p tcp -d 192.168.111.111 --dport 3389 -j ACCEPT
  '';

  system.stateVersion = "25.11";
}