{pkgs, ...}: {
  imports = [./desktop.nix];
  boot = {
    loader.efi.efiSysMountPoint = "/boot/efi";
    initrd = {
      secrets = {"/crypto_keyfile.bin" = null;};
      luks.devices."luks-47d34268-5100-4eba-b34d-220f4239c1cb" = {
        device = "/dev/disk/by-uuid/47d34268-5100-4eba-b34d-220f4239c1cb";
        keyFile = "/crypto_keyfile.bin";
      };
    };
  };
  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [openfortivpn samba];
  };
  services.ollama.enable = true;
}