{ lib, ... }: {
  config = {
    nix = {
      channel.enable = lib.mkDefault false;

      daemonCPUSchedPolicy = lib.mkDefault "batch";
      daemonIOSchedClass = lib.mkDefault "best-effort";
      daemonIOSchedPriority = lib.mkDefault 7;

      gc = {
        automatic = lib.mkDefault true;
        dates = lib.mkDefault "weekly";
        options = lib.mkDefault "--delete-older-than 14d";
      };

      settings = {
        experimental-features = lib.mkDefault [
          "cgroups"
          "nix-command"
          "flakes"
          "repl-flake"
        ];

        allowed-users = lib.mkDefault [ "@users" ];
        trusted-users = lib.mkDefault [ "@wheel" ];
        use-groups = lib.mkDefault true;
      };
    };
  };

}