{ pkgs, username, ... }:
{
  imports = [ ./laptop.nix ];
  home-manager.users.${username} = {
    imports = [ ./home/work.nix ];
    wayland.windowManager.sway.config = {
      output."eDP-1".scale = "1.25";
      workspaceOutputAssign = [
        {
          output = "eDP-1";
          workspace = "1";
        }
      ];
    };
    services.kanshi = {
      enable = true;
      settings =
        let
          laptopScreen = {
            criteria = "eDP-1";
            scale = 1.25;
            position = "2560,576";
          };
          monitor = {
            criteria = "Dell Inc. DELL P3223QE CCG8YN3";
            scale = 1.5;
            position = "0,0";
          };
        in
        [
          {
            profile = {
              name = "undocked";
              outputs = [ laptopScreen ];
            };
          }
          {
            profile = {
              name = "docked";
              outputs = [
                laptopScreen
                monitor
              ];
            };
          }
        ];
    };
  };
  boot.initrd = {
    secrets = {
      "/crypto_keyfile.bin" = null;
    };
    luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd" = {
      device = "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
      keyFile = "/crypto_keyfile.bin";
    };
  };
  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [ openfortivpn ];
  };
  services = {
    samba.enable = true;
    hardware.bolt.enable = true;
  };
}