{ inputs, pkgs, config, ... }:
{
  imports = [ inputs.nix-gc-env.nixosModules.default ];

  config = {
    nix.gc = {
      automatic = true;
      dates = "weekly";

      # `delete_generations` added by nix-gc-env
      delete_generations = "+${builtins.toString config.boot.loader.systemd-boot.configurationLimit}";
    };

    boot = {
      kernelPackages = pkgs.linuxPackages_latest;

      kernel = {
        sysctl = {
          "fs.inotify.max_user_instances" = 1024; # default: 128
        };
      };

      loader = {
        systemd-boot = {
          enable = true;
          configurationLimit = 10;
        };

        efi.canTouchEfiVariables = true;
      };

      initrd.secrets = {
        "/crypto_keyfile.bin" = null;
      };
    };
  };
}