{ config, lib, pkgs, ... }: {
  nix = {
    settings = {
      experimental-features = [ "nix-command" "flakes" ];
      system-features = [ "big-parallel" "kvm" ];
      auto-optimise-store = true;
      download-buffer-size = 134217728;
    };
    gc.automatic = false;
    optimise.automatic = true;
  };

  nixpkgs.config.allowUnfree = true;
  hardware.enableRedistributableFirmware = true;

  boot.kernel.sysctl."kernel.yama.ptrace_scope" = "0";

  security.pam.loginLimits = [
    {
      domain = "*";
      type = "soft";
      item = "nice";
      value = "-11";
    }
    {
      domain = "*";
      type = "hard";
      item = "nice";
      value = "-11";
    }
    {
      domain = "*";
      type = "soft";
      item = "rtprio";
      value = "99";
    }
    {
      domain = "*";
      type = "hard";
      item = "rtprio";
      value = "99";
    }
    {
      domain = "*";
      type = "soft";
      item = "nofile";
      value = "8192";
    }
    {
      domain = "*";
      type = "hard";
      item = "nofile";
      value = "1048576";
    }
    {
      domain = "*";
      type = "soft";
      item = "memlock";
      value = "unlimited";
    }
    {
      domain = "*";
      type = "hard";
      item = "memlock";
      value = "unlimited";
    }
  ];
  #systemd.services.nix-daemon.serviceConfig.LimitNOFILE = lib.mkForce 134217728;

  security.wrappers = {
    ping = {
      owner = "root";
      group = "root";
      source = "${pkgs.iputils.out}/bin/ping";
      capabilities = "cap_net_raw+p";
    };
  };

  hardware.graphics = {
    enable = true;
    extraPackages = with pkgs; [
      libvdpau-va-gl
      libva-vdpau-driver
    ];
  };

  environment.systemPackages = with pkgs; [
    git # flakes
    appimage-run
    i2c-tools
    pciutils
    smartmontools
    lm_sensors
    libdrm
    libva-utils
    vulkan-loader
    vulkan-validation-layers
    vulkan-tools
    mesa-demos
  ];

  boot.binfmt.registrations.appimage = {
    wrapInterpreterInShell = false;
    interpreter = "${pkgs.appimage-run}/bin/appimage-run";
    recognitionType = "magic";
    offset = 0;
    mask = ''\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff'';
    magicOrExtension = ''\x7fELF....AI\x02'';
  };

  services.openssh.enable = true;

  time.timeZone = "America/New_York";
  i18n.defaultLocale = "en_US.UTF-8";
  i18n.supportedLocales = [
    "C.UTF-8/UTF-8"
    "${config.i18n.defaultLocale}/UTF-8"
    "ja_JP.UTF-8/UTF-8"
    "ko_KR.UTF-8/UTF-8"
  ];
  i18n.glibcLocales = pkgs.glibcLocales.override {
    allLocales = false;
    locales = [
      "C.UTF-8/UTF-8"
      "${config.i18n.defaultLocale}/UTF-8"
      "ja_JP.UTF-8/UTF-8"
      "ko_KR.UTF-8/UTF-8"
    ];
  };

  console = {
    font = "Lat2-Terminus16";
    keyMap = "us";
    useXkbConfig = false;
  };
}