diff --git a/system/sandbar/boot-config.nix b/system/sandbar/boot-config.nix
new file mode 100644
index 0000000..c7cd920
--- /dev/null
+++ b/system/sandbar/boot-config.nix
@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  boot = {
+    kernelPackages = pkgs.linuxPackages_latest;
+    tmp.cleanOnBoot = true;
+
+    initrd.systemd.enable = true;
+
+    initrd.luks.devices."${config.networking.hostName}" = {
+      name = config.networking.hostName;
+      device = "/dev/disk/by-uuid/bc14113a-1343-44bc-9d1a-a2114fdd9763";
+      preLVM = true;
+      allowDiscards = true;
+      bypassWorkqueues = true;
+    };
+  };
+}
diff --git a/system/sandbar/default.nix b/system/sandbar/default.nix
new file mode 100644
index 0000000..c35e22f
--- /dev/null
+++ b/system/sandbar/default.nix
@@ -0,0 +1,14 @@
+{ config, inputs, ... }:
+
+{
+  imports = [
+    ./boot-config.nix
+    ./hardware-configuration.nix
+    ../../sets/secureBoot.nix
+    ../../sets/sshd.nix
+    ../../sets/workstation.nix
+  ];
+
+  networking.hostName = "sandbar";
+  system.stateVersion = "24.05";
+}
diff --git a/system/sandbar/hardware-configuration.nix b/system/sandbar/hardware-configuration.nix
new file mode 100644
index 0000000..471da93
--- /dev/null
+++ b/system/sandbar/hardware-configuration.nix
@@ -0,0 +1,50 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ahci"
+    "nvme"
+    "usbhid"
+  ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/e1b6c33f-605f-4150-8da0-d3d52dd85b4b";
+    fsType = "ext4";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/0088-BD06";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
+  };
+
+  swapDevices = [ { device = "/dev/disk/by-uuid/dcc4c3b4-e859-4cc5-a56d-dbf83f321ac7"; } ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}