{
  pkgs,
  lib,
  config,
  inputs,
  ...
}: {
  # imports = [
  #   ../profiles/security.nix
  #   ../profiles/network.nix
  # ];
  config = {
    # system.stateVersion = "22.5";
    # nix = {
    #   registry.nixpkgs.flake = inputs.nixpkgs;
    #   gc.automatic = true;
    #   optimise.automatic = true;
    #   settings = {
    #     allowed-users = ["root"];
    #     trusted-users = ["root"];
    #     sandbox = true;
    #   };
    #   extraOptions = ''
    #     experimental-features = nix-command flakes
    #   '';
    # };
    # users.mutableUsers = false;
    # environment.defaultPackages = lib.mkForce [];

    programs.command-not-found.dbPath = inputs.programsdb.packages.${pkgs.system}.programs-sqlite;

    # boot = {
    #   tmp.cleanOnBoot = true;
    #   kernelParams = [
    #     "init_on_free=1"
    #     "page_poison=1"
    #     "page_alloc.shuffle=1"
    #     "slab_nomerge"
    #     "vsyscall=none"
    #   ];
    # };
  };
}