{pkgs, ...}: {
  # fucking linux vulnerability
  # enable flakes
  nix = {
    gc = {
      automatic = true;
      interval = {Weekday = 0; Hour = 20; Minute = 0;};
      options = "--delete-older-than 7d";
    };
    # package = pkgs.nixFlakes;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
    settings = {
      keep-outputs = true;
      keep-derivations = true;
      trusted-users = ["root" "y"];
    };
  };

  #direnv
  # programs.direnv.enable = true;
}