{
  pkgs,
  lib,
  config,
  inputs,
  ...
}: {
  imports = [
    ../profiles/security.nix
    ../profiles/network.nix
  ];
  config = {
    system.stateVersion = "22.5";
    nix = {
      registry.nixpkgs.flake = inputs.nixpkgs;
      gc.automatic = true;
      optimise.automatic = true;
      settings = {
        allowed-users = ["root"];
        trusted-users = ["root"];
        sandbox = true;
      };
      extraOptions = ''
        experimental-features = nix-command flakes
      '';
    };
    users.mutableUsers = false;
    environment.defaultPackages = lib.mkForce [];

    age.identityPaths = ["/nix/persist/etc/ssh/ssh_host_ed25519_key"];
    # causing issues, fix this
    programs.command-not-found.dbPath = inputs.programsdb.packages.${pkgs.system}.programs-sqlite;

    # save uid/guid
    environment.persistence."/nix/persist".directories = ["/var/lib/nixos"];

    boot = {
      tmp.cleanOnBoot = true;
      kernelParams = [
        "init_on_free=1"
        "page_poison=1"
        "page_alloc.shuffle=1"
        "slab_nomerge"
        "vsyscall=none"
      ];
    };
  };
}