{
  inputs = let
    inherit (import ./inputs) mkDep mkInput extraInputs;

    mainInputs = {
      systems = mkInput {
        owner = "nix-systems";
        repo = "default-linux";
      };

      nixpkgs = mkInput {
        owner = "NixOS";
        repo = "nixpkgs";
        # ref = "nixos-unstable";

        # FIXME: https://pr-tracker.nelim.org/?pr=357555
        rev = "5e4fbfb6b3de1aa2872b76d49fafc942626e2add";
      };

      home-manager = mkDep {
        owner = "nix-community";
        repo = "home-manager";
      };

      nix-on-droid = mkDep {
        owner = "nix-community";
        repo = "nix-on-droid";

        inputs.home-manager.follows = "home-manager";
      };

      sops-nix = mkDep {
        owner = "Mic92";
        repo = "sops-nix";
      };

      secrets = mkDep {
        type = "git";
        url = "ssh://git@git.nelim.org/matt1432/nixos-secrets";

        inputs.sops-nix.follows = "sops-nix";
      };
    };
  in
    mainInputs // extraInputs;

  outputs = inputs @ {
    nixpkgs,
    secrets,
    self,
    systems,
    ...
  }: let
    inherit (self.lib) mkVersion mkNixOS mkNixOnDroid mkPkgs;

    perSystem = attrs:
      nixpkgs.lib.genAttrs (import systems) (system:
        attrs (mkPkgs {inherit system nixpkgs;}));
  in {
    lib = import ./lib {inherit inputs perSystem;};

    nixosModules = import ./nixosModules self;

    homeManagerModules = import ./homeManagerModules self;

    nixosConfigurations = {
      # Desktops
      wim = mkNixOS {
        extraModules = [
          ./devices/wim
          secrets.nixosModules.default
        ];
      };
      binto = mkNixOS {
        cudaSupport = true;
        extraModules = [./devices/binto];
      };

      bbsteamie = mkNixOS {
        mainUser = "mariah";
        extraModules = [./devices/bbsteamie];
      };

      # NAS
      nos = mkNixOS {
        cudaSupport = true;
        extraModules = [
          ./devices/nos
          secrets.nixosModules.nos
        ];
      };

      # Build / test server
      servivi = mkNixOS {
        extraModules = [
          ./devices/servivi
          secrets.nixosModules.servivi
        ];
      };

      # Home-assistant
      homie = mkNixOS {
        extraModules = [
          ./devices/homie
          secrets.nixosModules.homie
        ];
      };

      # Cluster
      thingone = mkNixOS {
        extraModules = [
          (import ./devices/cluster "thingone")
          secrets.nixosModules.thingy
        ];
      };
      thingtwo = mkNixOS {
        extraModules = [
          (import ./devices/cluster "thingtwo")
          secrets.nixosModules.thingy
        ];
      };

      live-image = mkNixOS {
        mainUser = "nixos";
        extraModules = [./devices/live-image];
      };
    };

    nixOnDroidConfigurations.default =
      mkNixOnDroid [./devices/android];

    scopedPackages =
      perSystem (pkgs:
        import ./scopedPackages {inherit inputs mkVersion pkgs;});

    packages =
      perSystem (pkgs:
        import ./packages {inherit inputs mkVersion pkgs;});

    overlays = import ./overlays {};

    apps =
      perSystem (pkgs:
        import ./apps {inherit inputs pkgs;});

    appsPackages =
      perSystem (pkgs:
        import ./apps/nix/packages.nix {inherit pkgs self;});

    devShells = perSystem (pkgs: let
      bumpNpmDeps = pkgs.writeShellApplication {
        name = "bumpNpmDeps";
        runtimeInputs = builtins.attrValues {
          inherit
            (pkgs)
            prefetch-npm-deps
            nodejs_latest
            ;
        };
        text = ''
          npm i --package-lock-only || true # this command will fail but still updates the main lockfile
          prefetch-npm-deps ./package-lock.json
        '';
      };
    in {
      default = pkgs.mkShell {
        packages = [
          (pkgs.writeShellScriptBin "mkIso" ''
            isoConfig="nixosConfigurations.live-image.config.system.build.isoImage"
            nom build $(realpath /etc/nixos)#$isoConfig
          '')
          (pkgs.writeShellApplication {
            name = "fixUidChange";
            text = ''
              GROUP="$1"
              OLD_GID="$2"
              NEW_GID="$3"

              sudo sed -i -e "/^$GROUP:/d" /etc/group                 # Remove generated group entry
              sudo find / -gid "$OLD_GID" -exec chgrp "$NEW_GID" {} + # Change GID on existing files
              exec nh os switch                                       # Regenerate /etc/group with new GID
            '';
          })
        ];
      };

      netdaemon = pkgs.mkShell {
        packages = [
          pkgs.dotnet-sdk_8
        ];
      };

      node = pkgs.mkShell {
        packages =
          (builtins.attrValues {
            inherit
              (pkgs)
              nodejs_latest
              typescript
              ;
          })
          ++ [bumpNpmDeps];
      };

      subtitles-dev = pkgs.mkShell {
        packages =
          (builtins.attrValues {
            inherit
              (pkgs)
              nodejs_latest
              ffmpeg-full
              typescript
              ;

            inherit
              (pkgs.nodePackages)
              ts-node
              ;
          })
          ++ [bumpNpmDeps];
      };
    });

    # For nix-fast-build. I use a custom output to alleviate eval time of this flake. ie. when doing nix flake show
    nixFastChecks =
      perSystem (pkgs:
        import ./checks {inherit pkgs self;});

    formatter = perSystem (pkgs: pkgs.alejandra);
  };
}