{ pkgs, username, ... }:
{
  imports = [ ./laptop.nix ];
  home-manager.users.${username} = {
    imports = [ ./home/work.nix ];
  };
  boot.initrd = {
    secrets = {
      "/crypto_keyfile.bin" = null;
    };
    luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd" = {
      device = "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
      keyFile = "/crypto_keyfile.bin";
    };
  };
  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [ openfortivpn ];
  };
  services.hardware.bolt.enable = true;
}