{
  lib,
  pkgs,
  inputs,
  system,
  target,
  format,
  virtual,
  systems,
  config,
  ...
}:
{
  networking.hostName = "greylag";
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  boot.initrd.availableKernelModules = [
    "xhci_pci"
    "thunderbolt"
    "nvme"
    "uas"
    "usbhid"
    "sd_mod"
    "ext4"
  ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-intel" ];
  boot.extraModulePackages = [ ];

  boot.initrd.systemd.enable = true; # needed for the way we do our YubiKey
  boot.initrd.luks.devices."key".device = "/dev/disk/by-label/KEY";

  boot.initrd.luks.devices."luks-expansion0" = {
    device = "/dev/disk/by-label/EXPANSION0";
    keyFile = "/key:/dev/mapper/key";
  };
  boot.initrd.luks.devices."luks-ssd0" = {
    device = "/dev/disk/by-label/SSD0";
    keyFile = "/key:/dev/mapper/key";
  };

  fileSystems =
    (lib.mapAttrs
      (_: share_name: {
        device = "/dev/disk/by-label/BTRFS0";
        fsType = "btrfs";
        options = [
          "subvol=shared/${share_name}"
          "compress=zstd:1"
        ];
      })
      {
        "/home/minion/Code" = "@Code";
        "/var/lib/containers" = "@containers";
        "/etc/NetworkManager" = "@NetworkManager";
        "/home/minion/.local/share/containers/storage" = "@personal-containers";
        "/home/minion/.gtimelog" = "@gtimelog";
        "/home/minion/Documents" = "@documents";
      }
    )
    // {
      "/mnt" = {
        device = "/dev/mapper/key";
        fsType = "ext4";
      };

      "/" = {
        device = "/dev/disk/by-label/BTRFS0";
        fsType = "btrfs";
        options = [
          "subvol=@nixos"
          "compress=zstd:1"
        ];
      };

      "/var" = {
        device = "/dev/disk/by-label/BTRFS0";
        fsType = "btrfs";
        options = [
          "subvol=@nixos-var"
          "compress=zstd:1"
        ];
      };

      "/home" = {
        device = "/dev/disk/by-label/BTRFS0";
        fsType = "btrfs";
        options = [
          "subvol=@nixos-home"
          "compress=zstd:1"
        ];
      };

      "/nix" = {
        device = "/dev/disk/by-label/BTRFS0";
        fsType = "btrfs";
        options = [
          "subvol=@nixos-nix"
          "compress=zstd:1"
        ];
      };

      "/boot" = {
        device = "/dev/disk/by-label/ESP";
        fsType = "vfat";
      };
    };

  swapDevices = [ ];

  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
  # still possible to use this option, but it's recommended to use it in conjunction
  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
  networking.useDHCP = lib.mkDefault true;
  # networking.interfaces.enp0s13f0u4u4u4.useDHCP = lib.mkDefault true;
  # networking.interfaces.wlp166s0.useDHCP = lib.mkDefault true;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}