{
  lib,
  pkgs,
  modulesPath,
  namespace,
  ...
}:
{
  imports = [
    "${modulesPath}/installer/cd-dvd/installation-cd-graphical-gnome.nix"
  ];

  ${namespace} = {
    bootloader.lanzaboote.enable = true;

    hardware.disko = {
      enable = true;
      filesystem = "btrfs";
    };

    impermanence = {
      enable = true;
    };

    network = {
      hostName = "nixos";
      ipv4 = {
        method = "auto";
        interface = "wlan0";
      };
      firewall = {
        enable = true;
        allowPing = true;
        allowedTCPPorts = [ 22 ];
      };
    };

    security.tpm.enable = true;

    user = {
      name = "nixos";
      password = "nixos";
    };
  };

  specialisation.graphical.configuration = {
    ${namespace}.desktop.plasma.enable = true;
  };

  boot = {
    kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
    supportedFilesystems.zfs = false;
  };

  services.openssh = {
    enable = lib.mkForce true;
    settings = {
      PermitRootLogin = lib.mkForce "yes";
      PasswordAuthentication = lib.mkForce false;
    };
  };

  home-manager.users.nixos.snowfallorg.user.name = "nixos";

  sops.defaultSopsFile = lib.mkForce "/dev/null";
  sops.validateSopsFiles = false;
}