{
  lib,
  secrets,
  ...
}:
{
  imports = [
    ./users.nix
    ./zram.nix
  ];

  time.timeZone = secrets.i18n.timezone;
  services.openssh.settings.PermitRootLogin = "prohibit-password";
  networking.firewall.enable = lib.mkForce false;
}