{lib, config, pkgs, ...}: {
  lyn.sops.default.enable = true;
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  nixpkgs.config.allowUnfree = true;
  nix.package = config.pkgsInstances.unstable.lix;
  environment.variables.EDITOR = "nvim";  
  
  time.timeZone = "Europe/Berlin";

  services.openssh = {
	enable = true;
	settings = {
		X11Forwarding = true;
		PermitRootLogin = "no";
		PasswordAuthentication = false;
	};
	openFirewall = true;
  };
  # Disable password checking for wheel group users so we can solely rely on ssh keys
  security.sudo.wheelNeedsPassword = false;

   environment.systemPackages = with pkgs; [
    git
    vim
    neovim 
    wget
    curl
    htop
  ];
}