{
  description = "My personal configuration in Nix (and some native configurations)";
  inputs = {
    nixpkgs.url = "nixpkgs/nixos-unstable";
    agenix = {
      url = "github:ryantm/agenix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    home-manager = {
      url = "github:nix-community/home-manager";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    flake-utils.url = "github:numtide/flake-utils";
    nixgl.url = "path:out-of-tree/nixGL";
    rust-overlay.url = "github:oxalica/rust-overlay";
    # Allows default.nix to call onto flake.nix. Useful for nix eval and automations
    flake-compat = {
      url = "github:edolstra/flake-compat";
      flake = false;
    };
    kpcli-py = {
      url = "github:rebkwok/kpcli";
      flake = false;
    };
  };

  outputs = {
    nixpkgs, agenix, home-manager, flake-utils, nixgl, rust-overlay, flake-compat
    ,...
  }@_inputs: let 
    # Context/global stuffs to be passed down
    # TODO: adapt to different platforms think about different systems later
    system = "x86_64-linux";
    pkgs = import nixpkgs {
      inherit system;
      overlays = import ./overlays.nix _inputs;
      config = {
        allowUnfree = true;
      };
    };

    # inject nixpkgs.lib onto c_ (calculus)
    _lib = pkgs.lib;
    inputs = (_lib.recursiveUpdate {
      inherit system; 
      # NOTE: this will only read files that are within git tree
      # all secrets should go into secrets.nix and secrets/*.age
      proj_root = let 
        path = builtins.toString ./.;
      in {
        inherit path;
        configs.path = "${path}/native-configs";
        scripts.path = "${path}/scripts";
        secrets.path = "${path}/secrets";
        testdata.path = "${path}/tests";
        modules.path = "${path}/modules";
        hosts.path = "${path}/hosts";
        users.path = "${path}/users";
      };
    } _inputs);
    inputs_w_pkgs = (_lib.recursiveUpdate {inherit pkgs; lib = pkgs.lib;} inputs);
    lib = _lib.recursiveUpdate (import ./lib inputs_w_pkgs) _lib;

    # update inputs with our library and past onto our end configurations
    inputs_w_lib = (lib.recursiveUpdate {inherit lib;} inputs_w_pkgs);
    modules = (import ./modules inputs_w_lib);
    hosts = (import ./hosts inputs_w_lib); 
    users = (import ./users inputs_w_lib);
    
    # {nixpkgs, agenix, home-manager, flake-utils, nixgl, rust-overlay, flake-compat
    # ,pkgs, lib (extended), proj_root}
    final_inputs = inputs_w_lib;

    # Tests: unit + integration
    unit_tests = (import ./lib/test.nix final_inputs) //
      {
        test_example = {
          expr = "names must start with 'test'";
          expected = "or won't show up";
        };
        not_show = {
          expr = "this will be ignored by lib.runTests";
          expected = "for sure";
        };
      };

  in {
    inherit (hosts) nixosConfigurations;
    # inherit (users) homeConfigurations;
    inherit lib;
    devShell."${system}" = import ./dev-shell.nix final_inputs;
    templates = import ./templates final_inputs;

    unit_tests = lib.runTests unit_tests;
    secrets = import ./secrets final_inputs;
    debug = {
      inherit final_inputs hosts users modules lib inputs_w_pkgs unit_tests pkgs;
    };
  };
}