{
  nix.settings.trusted-users = [
    "root"
    "@wheel"
  ];
  nix.gc = {
    automatic = true;
    dates = "weekly";
    options = "--delete-older-than 30d";
  };

  # TODO: this should be a secret, maybe
  nix.extraOptions = ''
    access-tokens = github.com=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
  '';
}