{ pkgs, ... }: {
  nix = {
    package = pkgs.nixVersions.stable;

    gc = {
      user = "root";
      automatic = true;
      interval = [{
        Hour = 7;
        Minute = 0;
        Weekday = 0;
      }];
      options = "--delete-older-than 7d";
    };

    settings = {
      trusted-users = [ "@admin" "fcuny" ];
      experimental-features = [ "nix-command" "flakes" ];
    };
  };

  nixpkgs.config = {
    allowUnfree = true;
    permittedInsecurePackages = [
      "nix-2.16.2" # FIXME https://github.com/nix-community/nixd/issues/357
    ];
  };
}