{pkgs, ...}: {
  # CUPS Druckdienst für PDF-Druck aus n8n
  # Drucker: Kyocera TASKalfa 4054ci @ 192.168.152.137
  services.printing = {
    enable = true;
    drivers = with pkgs; [
      cups-filters # driverless IPP Everywhere Support
    ];
  };

  # Avahi für mDNS/IPP-Druckererkennung
  services.avahi = {
    enable = true;
    nssmdns4 = true;
    openFirewall = true;
  };

  # Kyocera TASKalfa 4054ci deklarativ einrichten
  hardware.printers = {
    ensurePrinters = [
      {
        name = "JW2OG";
        location = "Buero";
        description = "Kyocera TASKalfa 4054ci";
        deviceUri = "ipps://192.168.152.137:443/ipp/print";
        model = "everywhere";
        ppdOptions = {
          PageSize = "A4";
        };
      }
    ];
    ensureDefaultPrinter = "JW2OG";
  };

  # n8n braucht Zugriff auf lp/lpr zum Drucken
  systemd.services.n8n = {
    path = [pkgs.cups];
    serviceConfig.SupplementaryGroups = ["lp"];
  };
}