{ inputs, ... }: {

    flake.nixosModules.live = { pkgs, ... }: {

        imports = with inputs; [

            disko.nixosModules.default

                (import ./disko.nix { device = "/dev/mmcblk0"; })

                sops-nix.nixosModules.sops

                home-manager.nixosModules.default

        ];

        config = {

            hardware.enableRedistributableFirmware = true;
            hardware.enableAllHardware = true;

            programs.zsh.enable = true;

            environment.shells = with pkgs; [ zsh bashInteractive ];

            networking = {
                nameservers = [ "1.1.1.1" "1.0.0.1" ];
                networkmanager.enable = true;
            };

            nixpkgs.hostPlatform = "x86_64-linux";

            boot = {
                loader = {
                    systemd-boot.enable = true;
                    efi.canTouchEfiVariables = true;
                };
            };

            users.users."nathan" = {
                hashedPassword = "$y$j9T$F0pn6l4C45lz4a0FTZLqE0$Fc48Ptbmz/3MJCk/Jsaqop4ff.bY3J3GcjhmJx5R7k6";
                packages = with pkgs; [ 
                    git 
                    nerd-fonts.fira-code
                ];
            };

            sops = {
                age.keyFile = "/var/lib/sops/age/keys.txt";
                defaultSopsFile = ./secrets.yaml;
                defaultSopsFormat = "yaml";
#secrets."nathan/pass".neededForUsers = true;
            };

            system.stateVersion = "25.05";

            fonts.packages = with pkgs; [ nerd-fonts.fira-code ];
        };
    };
}