nix-config-v2/modules/machine/ixion/configuration.nix

{
  pkgs,
  userName,
  ...
}: {
  imports = [
    ../../pwrMgmt
    ../../networking/core.nix
    ../../virtualization/podman.nix
    ../../virtualization/quadlet.nix
    ../../virtualization/hardware.nix
  ];

  # Enable flakes for NixOS
  nix.settings.experimental-features = ["nix-command" "flakes"];

  # Custom kernel/boot stuff
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
  };

  # Enable Polkit
  security.polkit.enable = true;

  # Make sure Bluetooth is off!
  hardware.bluetooth.enable = false;

  # Set your timezone
  time.timeZone = "America/Detroit";

  # Power management module
  pwrMgmt = {
    enable = true;
    cpuFreqGovernor = "performance";
    powertop.enable = false;
  };

  # Podman module (see ../../virtualization/podman.nix)
  podman = {
    enable = true;
    extraPackages = with pkgs; [
      docker-credential-helpers
      toolbox
      cosign
      crane
      podman-tui
    ];
  };

  # Core networking module (see ../../networking/core.nix)
  network = {
    firewall.enable = true;
    networkManager.enable = true;
  };

  programs = {
    # Enable GnuPG
    gnupg.agent = {
      enable = true;
      enableSSHSupport = true;
    };

    # Enable SUID wrappers (some programs need them)
    mtr.enable = true;
  };

  users.users.${userName}.extraGroups = ["wheel" "video" "podman" "network"];

  services = {
    # Enable OpenSSH
    openssh.enable = true;
  };

  # Install packages to be installed system-wide
  environment.systemPackages = with pkgs; [
    wireguard-tools
  ];

  system.stateVersion = "25.05";
}