{
  modulesPath,
  lib,
  pkgs,
  commonArgs,
  ...
}: {
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

  boot.loader.grub = {
    efiSupport = true;
    efiInstallAsRemovable = true;
  };

  services.openssh.enable = true;

  services.prometheus.exporters.node = {
    enable = true;
    openFirewall = false;
  };
  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 9100 ];

  nix.extraOptions = ''
    experimental-features = nix-command flakes ca-derivations
    warn-dirty = false
    keep-outputs = false
  '';

  environment.systemPackages = map lib.lowPrio [
    pkgs.curl
    pkgs.gitMinimal
    pkgs.htop
    pkgs.neovim
  ];

  users.users.tangler = {
    extraGroups = ["networkmanager" "wheel"];
    openssh.authorizedKeys.keys = commonArgs.sshKeys;
    isNormalUser = true;
  };

  security.sudo.extraRules = [
    {
      users = ["tangler"];
      commands = [
        {
          command = "ALL";
          options = ["NOPASSWD"];
        }
      ];
    }
  ];
}