{ inputs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ./disk-config.nix
    ../../configs/metrics/exporters.nix
  ];

  config = {
    # FIDO2 LUKS unlock (matches vade setup)
    boot.initrd.luks.devices."crypted".crypttabExtraOpts = [
      "fido2-device=auto"
      "token-timeout=10"
    ];

    users.users.kyle.linger = true;
    systemd.user.services.podman-restart.wantedBy = [ "default.target" ];
  };
}