{ lib, nixos-hardware, ... }:

{
  # correctly configure hardware in this pi server.
  imports = [
    nixos-hardware.nixosModules.raspberry-pi-4
  ];

  # boot settings
  boot = {
    loader = { 
      grub.enable = false;
      generic-extlinux-compatible.enable = true;
    };

    kernelModules = [ "wireguard" ];
  };

  # apply rpi4-specific device tree from nixos-hardware.
  hardware = {
    raspberry-pi."4".apply-overlays-dtmerge.enable = true;
    deviceTree = {
      enable = true;
      filter = "*rpi-4-*.dtb";
    };
  };

  networking = {
    # todo: configure properly
    firewall.enable = lib.mkForce false;

    useDHCP = true;
    networkmanager = {
      enable = false;
      wifi.powersave = false;
    };
  };
}