{ modulesPath, lib, pkgs, commonArgs, ... }:
{
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

  boot.loader.grub = {
    efiSupport = true;
    efiInstallAsRemovable = true;
  };

  services.openssh.enable = true;

  nix.extraOptions = ''
    experimental-features = nix-command flakes ca-derivations
    warn-dirty = false
    keep-outputs = false
  '';

  environment.systemPackages = map lib.lowPrio [
    pkgs.curl
    pkgs.gitMinimal
    pkgs.htop
    pkgs.neovim
  ];

  users.users.tangler = {
    extraGroups = [ "networkmanager" "wheel" ];
    openssh.authorizedKeys.keys = commonArgs.sshKeys;
    isNormalUser = true;
  };

  security.sudo.extraRules = [
    {
      users = [ "tangler" ];
      commands = [
        {
          command = "ALL";
          options = [ "NOPASSWD" ];
        }
      ];
    }
  ];
}