{ config, lib, pkgs, modulesPath, ... }:
{

  # imports
  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];

  # bootloader
  boot.extraModulePackages = [ ];
  boot.initrd.kernelModules = [ "kvm-intel" ];
  boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
  boot.initrd.luks = {
    devices = {

      # encrypted root 
      "luks-057d6954-2fbe-4566-a0b9-cc7b8a9f9fd8" = {
        device = "/dev/disk/by-uuid/057d6954-2fbe-4566-a0b9-cc7b8a9f9fd8";
      };

      # encrypted swap
      "luks-4dcf40dc-d12c-43e4-8727-687451750f90" = {
        device = "/dev/disk/by-uuid/4dcf40dc-d12c-43e4-8727-687451750f90";
      };
    };
  };

  # filesystems - boot
  fileSystems."/boot" = { 
    device = "/dev/disk/by-uuid/5180-0B5A";
    fsType = "vfat";
  };

  # filesystems - root
  fileSystems."/" = { 
    device = "/dev/disk/by-uuid/ad8f83d1-3c00-49cc-90eb-8679d6600ddc";
    fsType = "ext4";
  };

  # swap device
  swapDevices = [{ 
    device = "/dev/disk/by-uuid/e4772fc5-e676-48e4-9c35-3934e9a178b1"; 
  }];

  # networking
  networking.useDHCP = lib.mkDefault true;

  # hardware
  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}