{
  root,
  pkgs,
  upkgs,
  lib,
  inputs,
  config,
  ...
}: {
  nix.settings = {
    # make wheel group trusted users allows my "ae" user
    # to import packages not signed by a trusted key
    # (aka super duper easier to remote deploy)
    trusted-users = ["root" "@wheel"];
    experimental-features = [
      "nix-command"
      "flakes"
      "pipe-operators"
    ];
    download-buffer-size = 524288000; # 500 MiB
  };

  time.timeZone = lib.mkDefault "Australia/Brisbane";

  i18n.defaultLocale = "en_US.UTF-8";
  console = {
    font = "Lat2-Terminus16";
    keyMap = "us";
  };

  users.defaultUserShell = pkgs.bash;

  home-manager = {
    users =
      config.users.users
      |> builtins.attrNames
      |> builtins.filter (x: builtins.pathExists (root + "/homes/${x}"))
      |> lib.genAttrs (x: import (root + "/homes/${x}"));

    extraSpecialArgs = {inherit inputs pkgs upkgs;};
  };

  environment.systemPackages = with pkgs; [
    git
    vim
    wget
    tree
  ];
}