{
  username,
  inputs,
  site_config,
  ...
}:
{
  imports = [
    ../../modules/desktop-common.nix
    ../../modules/desktop-jovian.nix
    ./disk.nix
    ./impermanence.nix

    inputs.impermanence.nixosModules.impermanence
  ];

  networking.hostId = "a1b2c3d4";

  # SSH for remote management from laptop
  services.openssh = {
    enable = true;
    ports = [ 22 ];
    settings = {
      PasswordAuthentication = false;
      PermitRootLogin = "yes";
    };
  };

  users.users.${username}.openssh.authorizedKeys.keys = [
    site_config.ssh_keys.laptop
  ];

  users.users.root.openssh.authorizedKeys.keys = [
    site_config.ssh_keys.laptop
  ];

  jovian.devices.steamdeck.enable = true;

  # opt back into the SteamOS kernel cmdline (amd_iommu=off, lockup_timeout,
  # sched_hw_submission=4, dcdebugmask=0x20000, ttm.pages_min, audit=0).
  # desktop-jovian.nix defaults this to false to keep the Deck-tuned amdgpu
  # params off RDNA3 desktops (yarn); patiodeck IS a Deck so it wants them.
  jovian.steamos.enableDefaultCmdlineConfig = true;
}