{ pkgs, username, ... }:
{
  imports = [ ./laptop.nix ];
  home-manager.users.${username} = {
    imports = [ ./home/work.nix ];
    wayland.windowManager.sway.config = {
      output."Dell Inc. DELL P3223QE CCG8YN3".scale = "1.5";
      workspaceOutputAssign = [
        {
          output = "eDP-1";
          workspace = "1";
        }
      ];
    };
    services.kanshi = {
      enable = true;
      settings =
        let
          laptopScreen.criteria = "eDP-1";
          monitor.criteria = "Dell Inc. DELL P3223QE CCG8YN3";
        in
        [
          {
            profile = {
              name = "default";
              outputs = [
                {
                  inherit (laptopScreen) criteria;
                  status = "enable";
                  position = "0,0";
                }
              ];
            };
          }
          {
            profile = {
              name = "docked";
              outputs = [
                {
                  inherit (laptopScreen) criteria;
                  status = "disable";
                }
                {
                  inherit (monitor) criteria;
                  status = "enable";
                  position = "0,0";
                }
              ];
            };
          }
        ];
    };
  };
  boot.initrd = {
    secrets = {
      "/crypto_keyfile.bin" = null;
    };
    luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd" = {
      device = "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
      keyFile = "/crypto_keyfile.bin";
    };
  };
  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [ openfortivpn ];
  };
  services = {
    samba.enable = true;
    hardware.bolt.enable = true;
  };
}