{...}: {
  boot = {
    tmp.cleanOnBoot = true;
    loader.grub.device = "/dev/sda";
  };

  constants.sopsFile = ../../common/auths.yaml;

  security.sudo.wheelNeedsPassword = false;

  system.stateVersion = "25.11";

  zramSwap.enable = true;
}