{pkgs, ...}: {
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    loader.grub.device = "/dev/sda";
    tmp.cleanOnBoot = true;
  };

  constants.sopsFile = ../../common/auths.yaml;

  security.sudo.wheelNeedsPassword = false;

  system.stateVersion = "25.11";

  zramSwap.enable = true;
}