{ pkgs, ... }: {
  nix = {
    settings.experimental-features = [
      "nix-command"
      "flakes"
    ];
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;

  networking.hostName = "plinth";
  time.timeZone = "UTC";
  networking.firewall.enable = false;

  services.openssh.enable = true;
  services.openssh.settings.PasswordAuthentication = false;
  users.users.root.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMiGDjT86bf2DNsVPOgtvT1SGCsI5EE5bLhxiJnMaDJQ charlotte@crystal'' ]; # failsafe

  programs.zsh.enable = true;
  users.users.charlotte = {
    isNormalUser = true;
    description = "charlotte";
    extraGroups = ["wheel"];
    shell = pkgs.zsh;
  };
  security.sudo.wheelNeedsPassword = false;
}