{ den, inputs, lib, ... }: {
  den.aspects.notebook-specific.nixos = { pkgs, ... }: {
    imports = [
      ./_hardware/notebook-hardware.nix
      ./_hardware/notebook-disko.nix
      inputs.disko.nixosModules.disko
    ];

    hardware.graphics = {
      enable      = true;
      enable32Bit = true;
    };

    security.sudo.wheelNeedsPassword = lib.mkForce true;

    networking.firewall = {
      enable          = true;
      allowedTCPPorts = [];
      allowedUDPPorts = [];
    };

    services.thermald.enable = true;
    powerManagement.enable   = true;

    services.tlp = {
      enable   = true;
      settings = {
        CPU_SCALING_GOVERNOR_ON_AC  = "performance";
        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
      };
    };

    boot = {
      initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ];
      initrd.kernelModules          = [ "dm-crypt" ];
      kernelModules                 = [ "kvm-intel" ];
      initrd.compressor             = "zstd";

      loader = {
        grub = {
          enable             = true;
          device             = "nodev";
          efiSupport         = true;
          configurationLimit = 2;
          enableCryptodisk   = true;
        };
        efi.canTouchEfiVariables = true;
      };
    };
  };
}