{
  pkgs,
  config,
  lib,
  inputs,
  ...
}: {

  imports = [
    inputs.autoaspm.nixosModules.default
  ];

  # base system package install list
  environment.systemPackages = with pkgs; [
    wget
    curl
    dig
    rsync
    git
    age
    vim
    btop
    cifs-utils
    usbutils
    pciutils
    powertop
  ];

  # set timezone
  time.timeZone = "America/Chicago";

  # allow proprietary packages
  nixpkgs.config.allowUnfree = true;

  # power management
  services.autoaspm.enable = true;
  powerManagement.powertop.enable = true;

  # enable flakes
  nix.settings.experimental-features = ["nix-command" "flakes"];
  users.defaultUserShell = pkgs.zsh;

  # passwordless rebuild
  security.sudo = {
    extraRules = [
      {
        users = ["blake"];
        commands = [
          {
            command = "/run/current-system/sw/bin/nixos-rebuild";
            options = ["NOPASSWD"];
          }
          {
            command = "/run/current-system/sw/bin/systemctl";
            options = ["NOPASSWD"];
          }
          {
            command = "/run/current-system/sw/bin/journalctl";
            options = ["NOPASSWD"];
          }
          {
            command = "/run/current-system/sw/bin/tailscale";
            options = ["NOPASSWD"];
          }
        ];
      }
    ];
    extraConfig = ''
      Defaults insults
    '';
  };
}