#
#  Lifebook laptop — system configuration
#
{
  lib,
  pkgs,
  user,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
    ../../modules/desktop
  ];

  # ── Desktop module options ──────────────────────────────────────────────
  myDesktop.windowManager = "niri";
  myDesktop.niri.hotkeyVariant = "lifebook";
  myDesktop.cpu = "intel";
  myDesktop.virtualisation.enable = true;

  myDesktop.laptop.enable = true;
  myDesktop.laptop.lidSwitch = "suspend-then-hibernate";
  myDesktop.laptop.hibernateDelaySec = "1h";

  myDesktop.git.signingKey = "/home/${user}/.ssh/id_ed25519_sk_rk_blackred";

  myDesktop.syncthing.enable = true;
  myDesktop.syncthing.devices = {
    "jupiter.home.opel-online.de" = {id = "T53WU6Z-3NT74ZE-PZVZB2N-7FBTZ5K-HESC2ZM-W4ABDAS-NWXHTGI-ST4CDQR";};
    "hades.home.opel-online.de" = {id = "3VPCBVW-RH7XKFM-TWJGQHC-ZRAQ575-CQKGGKP-NAB4VXE-KCKJFUT-AMCUQQA";};
  };
  myDesktop.syncthing.folders = {
    "Sync" = {
      path = "/home/kabbone/Sync";
      devices = ["jupiter.home.opel-online.de" "hades.home.opel-online.de"];
      ignorePerms = false;
    };
  };

  myDesktop.extraSystemPackages = with pkgs; [
    intel-media-driver
    intel-compute-runtime
  ];

  # ── Host-specific settings ──────────────────────────────────────────────
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    initrd.prepend = ["${./patched-SSDT4}"];
    loader = {
      systemd-boot.enable = lib.mkForce false;
      efi.canTouchEfiVariables = true;
      efi.efiSysMountPoint = "/boot";
      timeout = 1;
    };
    lanzaboote = {
      enable = true;
      pkiBundle = "/etc/secureboot";
    };
  };
}