{
  config,
  pkgs,
  lib,
  ...
}:
let
  cfg = config.hyperdeepnix;
  packages = import ../packages.nix {
    inherit pkgs lib;
    exclude_packages = cfg.exclude_packages;
  };
in
{
  environment.systemPackages = packages.systemPackages;
  networking.wireless.iwd.enable = true;
  networking.networkmanager.enable = lib.mkDefault false;
  services.connman = {
    enable = true;
    wifi.backend = "iwd";
    enableVPN = true;
    package = pkgs.connman.override {
      enableWireguard = true;
    };
  };
  services.udev.extraRules = ''
    SUBSYSTEM=="powercap", ACTION=="add", RUN+="${pkgs.bash}/bin/bash -c '${pkgs.coreutils}/bin/chmod a+r /sys/class/powercap/intel-rapl*/energy_uj /sys/class/powercap/intel-rapl*/*/energy_uj 2>/dev/null || true'"
  '';
  networking.wireguard.enable = true;
  services.upower.enable = true;
  networking.firewall.allowedTCPPorts = [ 53317 ];
  networking.firewall.allowedUDPPorts = [ 53317 ];
}