{
  flake.modules.nixos.wsl-settings =
    { pkgs, lib, ... }:
    let
    in
    {
      wsl = {
        enable = true;
        defaultUser = "jam";
        startMenuLaunchers = false; # Hide from start menu.
        useWindowsDriver = true; # Use Windows graphics drivers.
        docker-desktop.enable = true; # Allow docker-desktop to use NixOS-WSL.
        # Allow USB passthrough.
        usbip = {
          enable = true;
          # autoAttach = [ "1-9" ]; # Add device IDs like "4-1" to auto-attach USB devices.
        };
        # Necessary for usbip.
        extraBin = [
          { src = "${lib.getExe' pkgs.coreutils-full "ls"}"; }
          { src = "${lib.getExe pkgs.bash}"; }
          { src = "${lib.getExe' pkgs.linuxPackages.usbip "usbip"}"; }
        ];
        wslConf = {
          automount = {
            root = "/mnt";
            options = "metadata,uid=1000,gid=100,noatime";
          };
          boot.systemd = true;
          interop = {
            enabled = true;
            appendWindowsPath = false; # Do not add Windows executables to WSL path.
          };
          network.generateHosts = true;
        };
      };
    };
}

  flake.nixosConfigurations.pear = inputs.os.lib.nixosSystem {
    specialArgs = { inherit inputs; };
    system = "x86_64-linux";
    modules = with inputs.self.modules.nixos; [
      inputs.os-wsl.nixosModules.default

      desktop-tools
      disable-nano
      disable-nix-documentation
      dynamic-binaries
      hjem
      jujutsu-extra
      keys
      lib
      locale
      linux-kernel-zen
      netrc
      network
      nix-settings
      object-storage
      openssh
      packages
      packages-extra-desktop
      rebuild
      rust-desktop
      scratchpads
      secret-manager
      sudo-desktop
      system-types
      tailscale
      theme
      unfree
      users
      virtualisation
      wsl-settings
      yubikey
      {
        config = {
          operatingSystem = "linux";
          systemPlatform = "x86_64-linux";
          systemType = "wsl";
          network.hostName = "pear";
          unfree.allowedNames = [
            "nvidia-x11"
            "nvidia-settings"
            "steam"
            "steam-unwrapped"
          ];
          age.rekey.hostPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL2/Pg/5ohT3Dacnzjw9pvkeoQ1hEFwG5l1vRkr3v2sQ root@pear";
          age.secrets = {
            id.rekeyFile = ../secrets/pear-id.age;
            password.rekeyFile = ../secrets/pear-password.age;
            s3AccessKey.rekeyFile = ../secrets/s3-access-key.age;
            s3SecretKey.rekeyFile = ../secrets/s3-secret-key.age;
            # TODO
            # nixStoreKey.rekeyFile = ../secrets/pear-nix-store-key.age;
            context7Key = {
              rekeyFile = ../secrets/context7-key.age;
              owner = "jam";
              mode = "400";
            };
            zaiKey = {
              rekeyFile = ../secrets/z-ai-key.age;
              owner = "jam";
              mode = "400";
            };
          };
          system.stateVersion = "26.05";
        };
      }
    ];
  };

    build-pear:
        name: "Build: pear"
        runs-on: plum
        steps:
            - uses: actions/checkout@v5
            - name: "Build configuration for pear"
              run: nix build .#nixosConfigurations.pear.config.system.build.toplevel --accept-flake-config --builders "" --no-link

    # build-pear:
    #     name: "Build: pear"
    #     runs-on: plum
    #     steps:
    #         - uses: actions/checkout@v5
    #         - name: "Build configuration for pear"
    #           run: nix build .#nixosConfigurations.pear.config.system.build.toplevel --accept-flake-config --builders "" --no-link