{ lib, pkgs, ... }:
let
  inherit (lib) mkOption;
in
{
  config = {
    system = {
      stateVersion = "24.11";
      nixos = {
        distroName = "qCLKOS";
      };
      name = "qclk";
    };
    documentation.enable = false;

    time.timeZone = "Europe/Dublin";
    i18n.defaultLocale = "en_IE.UTF-8";

    boot = {
      loader = {
        grub.enable = false;
      };
      initrd = {
        systemd = {
          enable = true;
          emergencyAccess = true;
        };
      };
      consoleLogLevel = 7;
    };

    nix = {
      # We're a flake-only gal
      channel.enable = false;
      settings = {
        experimental-features = [ "nix-command" "flakes" "ca-derivations" ];
        extra-substituters = [ "https://nix-cache.nul.ie" ];
        extra-trusted-public-keys = [ "nix-cache.nul.ie-1:BzH5yMfF4HbzY1C977XzOxoPhEc9Zbu39ftPkUbH+m4=" ];
        fallback = false;
      };
    };

    users = {
      users = {
        root = {
          openssh.authorizedKeys.keyFiles = [
            .keys/management.pub
          ];
        };
      };
    };

    environment = {
      systemPackages = with pkgs; [
        usbutils
        tcpdump

        (pkgs.vim.customize {
          name = "vim";
          vimrcConfig.packages.default = {
            start = [ pkgs.vimPlugins.vim-nix ];
          };
          vimrcConfig.customRC = "syntax on";
        })
      ];
    };

    programs = {
      command-not-found.enable = false;
      htop.enable = true;
    };

    services = {
      getty.autologinUser = "root";

      openssh = {
        enable = true;
        settings = {
          PermitRootLogin = "prohibit-password";
          PasswordAuthentication = false;
        };
      };
    };
  };
}