{ lib, ... }: {
  imports = [ ];

  boot = {
    loader.systemd-boot.enable = true;
    loader.efi.canTouchEfiVariables = true;
    initrd.availableKernelModules = [ "xhci_pci" "virtio_pci" "virtio_scsi" "usbhid" "sr_mod" ];
    initrd.kernelModules = [ ];
    kernelModules = [ ];
    extraModulePackages = [ ];
  };

  mySystem = {
    services.openssh.enable = true;
    security.wheelNeedsSudoPassword = false;

    # Restic backups disabled.
    # TODO: configure storagebox for hetzner backups
    system.resticBackup = {
      local.enable = false;
      local.noWarning = true;
      remote.enable = false;
      remote.noWarning = true;
    };
  };

  networking.useDHCP = lib.mkDefault true;
  nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
  # not supported
  services.smartd.enable = false;
}