system.scm:
(use-modules (gnu) (gnu home) (gnu packages terminals) (gnu packages wm) (gnu packages shells) (nongnu packages linux) (nongnu system linux-initrd))
(use-package-modules vpn)
(use-service-modules cups desktop networking dbus ssh audio xorg)

(define etc-sudoers-config
  (plain-file "etc-sudoers-config"
              "Defaults  timestamp_timeout=480
root        ALL=(ALL) ALL
%wheel      ALL=(ALL) ALL
user        ALL=(ALL) NOPASSWD:/run/current-system/profile/bin/loginctl"))




(operating-system
  (locale "en_US.utf8")
  (timezone "America/Cincinatti")
  (kernel linux)
  (sudoers-file etc-sudoers-config)
  (initrd microcode-initrd)
  (firmware (list linux-firmware))
  (keyboard-layout (keyboard-layout "us"))
  (host-name "system")

  ;; The list of user accounts ('root' is implicit).
  (users (cons* (user-account
                  (name "user")
                  (comment "system owner")
                  (group "users")
                  (shell (file-append zsh "/bin/zsh"))
                  (home-directory "/home/user")
                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
                %base-user-accounts))

  ;; Packages installed system-wide.  Users can also install packages
  ;; under their own account: use 'guix search KEYWORD' to search
  ;; for packages and 'guix install PACKAGE' to install a package.
  (packages (append (list
                          sway
                          swaylock
                          zsh
                          kitty
                          wireguard-tools)
                    %base-packages))
  ;;(kernel-loadable-modules (list wireguard-linux-compat))

  ;; Below is the list of system services.  To search for available
  ;; services, run 'guix system search KEYWORD' in a terminal.
  (services
   (append (list
                 (service gnome-desktop-service-type)
                 (service xfce-desktop-service-type)
                 (set-xorg-configuration
                  (xorg-configuration (keyboard-layout keyboard-layout))))
           (modify-services %desktop-services
        (gdm-service-type config =>
         (gdm-configuration
           (inherit config)
           (wayland? #t))))
           ))      ;;(simple-service 'wireguard-module
                ;;               kernel-module-loader-service-type
                ;;               '("wireguard")))


           ;; This is the default list of services we
           ;; are appending to.
           ;;%desktop-services))
  (bootloader (bootloader-configuration
                (bootloader grub-efi-removable-bootloader)
                (targets (list "/boot/efi"))
                (keyboard-layout keyboard-layout)))
  (mapped-devices (list (mapped-device
                          (source (uuid
                                   "874bca3c-0cad-45cc-9e08-f5fc7j899fac"))
                          (target "cryptroot")
                          (type (luks-device-mapping-with-options
                                #:key-file "/dev/sdb")))))

  ;; The list of file systems that get "mounted".  The unique
  ;; file system identifiers there ("UUIDs") can be obtained
  ;; by running 'blkid' in a terminal.
  (file-systems (cons* (file-system
                         (mount-point "/")
                         (device "/dev/mapper/cryptroot")
                         (type "btrfs")
                         (dependencies mapped-devices))
                       (file-system
                         (mount-point "/boot/efi")
                         (device (uuid "78BA-FA52"
                                       'fat32))
                         (type "vfat")) %base-file-systems)))