{ config, lib, pkgs, ... }:

{
  networking.networkmanager.enable = true;
  i18n.defaultLocale = "en_US.UTF-8";

  services.xserver.displayManager.lightdm.enable = false;
  services.xserver.enable = true;
  services.xserver.layout = "us";
  services.printing.enable = true;
  sound.enable = true;
  services.pipewire.enable = true;
  services.pipewire.pulse.enable = true;
  # services.xserver.libinput.enable = true;
  services.tlp.enable = true;
  services.tlp.settings = {
    START_CHARGE_THRESH_BAT0 = 70;
    STOP_CHARGE_THRESH_BAT0 = 75;
  };

  services.dnscrypt-proxy2.enable = true;
  services.dnscrypt-proxy2.settings = {
    listen_addresses = [ "127.0.0.1:5533" ];
    timeout = 5000;
    keepalive = 30;
    use_syslog = true;
    bootstrap_resolvers = [ "127.0.0.1:9052" ];
    ignore_system_dns = true;
  };
  environment.etc."resolv.conf".text = "nameserver 127.0.0.1";
  networking.networkmanager.dns = "dnsmasq";
  environment.etc."NetworkManager/dnsmasq.d/dns.conf".text = ''
interface=lo
listen-address=127.0.0.1
no-resolv
port=9052
'';

  services.dnsmasq.enable = true;
  services.dnsmasq.servers = [
    "127.0.0.1#5533"
  ];
  services.dnsmasq.extraConfig = ''
no-resolv
  '';
}