{
  inputs,
  lib,
  pkgs,
  nixosModules,
  ...
}:
let
  userName = "root";
  hostName = "Hermes";
  installDisk = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_115386992";
  sshKeys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICxY7ceahvTqe4AWGKRJNs1z4AdWT/WafkOBDaNrkB2p" # macbook
    "ssh-rsa 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" # Lysator
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBcMIOlEqBbL7ZhoqaC6pCGNsHdJeJ5SY66sUB2+CVGo" # desktop
  ];
in
{
  _module.args = {
    inherit
      userName
      hostName
      installDisk
      sshKeys
      ;
  };

  imports = [
    inputs.mailserver.nixosModules.default
    ./disko.nix
    ./hardware.nix
    nixosModules.base
    nixosModules.zfsRoot
    nixosModules.luksInitrdSshUnlock
    nixosModules.mailServer
    nixosModules.binBashWrapper
  ];

  my.binBashWrapper.enable = true;

  boot.loader.systemd-boot.enable = lib.mkForce false;
  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
  boot.loader.grub = {
    enable = lib.mkForce true;
    device = installDisk;
    efiSupport = true;
    efiInstallAsRemovable = true;
  };

  my.initrdSshUnlock = {
    enable = true;
    authorizedKeys = sshKeys;
  };
  users.users."${userName}".openssh.authorizedKeys.keys = sshKeys;

  networking.hostName = hostName;
  networking.hostId = "8d49a097";

  zramSwap = {
    enable = true;
    memoryPercent = 75;
    algorithm = "zstd";
  };


  my.dns.strictDNSSEC = true;

  system.stateVersion = "25.05";
}