{ pkgs, ... }:

{
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;

    loader.systemd-boot.enable = true;
    loader.efi.canTouchEfiVariables = true;
  };

  hardware = {
    enableRedistributableFirmware = true;
    enableAllFirmware = true;

    graphics = {
      enable = true;
      enable32Bit = true;
    };
  };

  networking = {
    useDHCP = false;
    dhcpcd.enable = false;
    # currently unused, serpentine connected over
    # ethernet, but possibility for wifi is still there.
    # wireless.interfaces = [ ];
  };
  systemd.network = {
    enable = true;
    networks = {
      "10-ether" = {
        name = "enp0s31f6"; # weird name
        DHCP = "yes";
      };
    };
  };

  # trying out this fancy "trust" stuff!
  systemd.tpm2.enable = true;
  security.tpm2 = {
    enable = true;
    pkcs11.enable = true;
    tctiEnvironment.enable = true;
  };

  zramSwap = {
    enable = true;
    algorithm = "zstd";
    swapDevices = 1;
    memoryPercent = 50;
  };
}