{ ... }:
{
  imports = [
    ./modules/copy-nix-store-to-misaki.nix
    ./modules/nix-remote-builders.nix
    ./modules/nix-builder.nix
    ./modules/nix-binary-cache.nix
  ];

  # Set your time zone.
  time.timeZone = "America/Chicago";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  #   useXkbConfig = true; # use xkb.options in tty.
  # };

  # Automatic doc cache generation
  documentation.man.cache.enable = true;

  # Home Manager's nix-index integration provides command suggestions.
  programs.command-not-found.enable = false;

  # Automatic Garbage Collection
  nix.gc.automatic = true;
  nix.gc.options = "--delete-older-than 8d";
  nix.settings = {
    fallback = true;
    # This cache is backed by Misaki's garbage-collected Nix store. Avoid
    # retaining narinfo for the default 30 days after its NAR is collected.
    narinfo-cache-positive-ttl = 86400;
    substituters = [
      "https://tranquil.cachix.org"
      "https://cache.ngp.computer"
    ];
    trusted-public-keys = [
      "tranquil.cachix.org-1:PoO+mGL6a6LcJiPakMDHN4E218/ei/7v2sxeDtNkSRg="
      "misaki.packetlost.dev:y5Z/utaVBozpL0UAbUQDWLjpm2sVMOoKzyG76n/167A="
    ];
    trusted-users = [ "@wheel" ];
  };
  # protect against the copy fail exploit by blacklisting the affected kernel modules
  boot.blacklistedKernelModules = [
    "af_alg"
    "algif_hash"
    "algif_skcipher"
    "algif_rng"
    "algif_aead"
  ];

  # I don't care that much about free vs unfree
  nixpkgs.config.allowUnfree = true;
}