{ pkgs, ... }:
{
  system.autoUpgrade.allowReboot = true;

  services.openssh = {
    enable = true;
    permitRootLogin = "no";
  };

  environment.systemPackages = with pkgs; [
    devenv
    direnv
  ];
}