{
  description = "nico's linux system.";

  inputs = {
    # NixOS official package source, using the unstable branch here
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    lanzaboote.url = "github:nix-community/lanzaboote/v0.4.2";
    lanzaboote.inputs.nixpkgs.follows = "nixpkgs";
    nix-darwin.url = "github:LnL7/nix-darwin";
    nix-darwin.inputs.nixpkgs.follows = "nixpkgs";
    disko.url = "github:nix-community/disko/latest";
    disko.inputs.nixpkgs.follows = "nixpkgs";
    jovian.url = "github:Jovian-Experiments/Jovian-NixOS";
    jovian.inputs.nixpkgs.follows = "nixpkgs";
  };

  outputs = { self, nixpkgs, lanzaboote, nix-darwin, disko, jovian, ... }@inputs: {
    nixosConfigurations.pluto = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        ./hosts/nixos-common.nix

        ./modules/nix/linux.nix
        ./modules/shell.nix

        ./modules/services/miniflux.nix
        ./modules/services/media/arr.nix
        ./modules/services/media/jellyfin.nix
        ./modules/services/ssh.nix
        ./modules/services/glance.nix

        ./modules/network/avahi.nix
        ./modules/network/firewall/opensnitch.nix
        ./modules/network/vpn/tailscale.nix

        ./modules/users/nico.nix
        ./modules/hardware/secureboot.nix
        lanzaboote.nixosModules.lanzaboote

        ./hosts/disko-desktop.nix
        disko.nixosModules.disko
        ./hosts/pluto/conf.nix
        ./hosts/pluto/specialisation.nix
        ./hosts/pluto/hardware-configuration.nix
      ];
    };

    darwinConfigurations.faye = nix-darwin.lib.darwinSystem {
      system = "aarch64-darwin";
      modules = [
        ./modules/desktop/fonts.nix
        ./modules/nix/darwin.nix
        ./modules/shell.nix

        ./modules/games/darwin.nix
        ./modules/applications/darwin.nix
        ./modules/desktop/de/darwin.nix
        ./modules/hardware/darwin.nix
        ./modules/nix/darwin.nix
        ./modules/network/vpn/tailscale.nix

        ./hosts/faye/conf.nix
      ];
    };
  };
}