{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-21.11-small";
    utils.url = "github:gytis-ivaskevicius/flake-utils-plus/v1.3.1";

    hm = {
      url = "github:nix-community/home-manager/release-21.11";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    # simple mailserver
    snm = {
      url = "gitlab:simple-nixos-mailserver/nixos-mailserver";
      inputs.nixpkgs.follows = "nixpkgs";
      inputs.flake-utils.follows = "utils/flake-utils";
    };

    # age for nix to store encrypted passwords conveniently
    agenix.url = "github:ryantm/agenix";
  };
  outputs = { self, hm, nixpkgs, agenix, ... }@inputs: {
    inherit self inputs;

    nixosConfigurations."thrall" = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        ({ nixpkgs = { config.allowUnfree = true; }; })
        inputs.snm.nixosModule
        ./modules/security.nix
        ./hosts/thrall
        agenix.nixosModules.age
        hm.nixosModules.home-manager
        {
          home-manager.useGlobalPkgs = true;
          home-manager.useUserPackages = true;
          home-manager.users.alex = import ./home/cli.nix;
        }
      ];
    };
  };
}