{pkgs, ...}: {
  # fucking linux vulnerability
  # enable flakes
  nix = {
    # gc =
    #   {
    #     automatic = true;
    #     options = "--delete-older-than 7d";
    #   }
    #   // (
    #     if pkgs.stdenv.isDarwin
    #     then {
    #       interval = {
    #         Weekday = 0;
    #         Hour = 20;
    #         Minute = 0;
    #       };
    #     }
    #     else {dates = "weekly";}
    #   );
    # package = pkgs.nixFlakes;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
    settings = {
      substituters = [
        "https://cache.nixos.org"
        "https://polwex.cachix.org"
        "https://nix-community.cachix.org"
        "https://nix-gaming.cachix.org"
      ];
      trusted-public-keys = [
        "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
        "polwex.cachix.org-1:6Qk8lW0wZ9omwmURpPQUEDUHAb6Nsb+f+pdH2hppBZY="
        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
        "nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="
      ];

      keep-outputs = true;
      keep-derivations = true;
      trusted-users = ["root" "y"];
      max-jobs = 2;
      cores = 16;
    };
    # buildMachines = [{
    #   hostName = "builder.lan";
    #   system = "x86_64-linux";
    #   protocol = "ssh";
    #   supportedFeatures = ["kvm" "big-parallel" "cuda"];

    # }];
    # distributedBuilds = true;
  };
  programs.nh = {
    enable = true;
    clean.enable = true;
    clean.extraArgs = "--keep-since 4d --keep 3";
    # flake = "/home/user/my-nixos-config";
  };

  #direnv
  # programs.direnv.enable = true;
}