{
  networking.hostName = "aberrant";

  # Necessary for flake support
  nix.settings.experimental-features = ["nix-command" "flakes"];

  # General / Perf
  zramSwap.enable = true;
  boot.tmp.cleanOnBoot = true;
  time.timeZone = "UTC";

  users.users = {
    # Disables root login by setting an invalid password
    root.hashedPassword = "!";
    anon = {
      isNormalUser = true;
      extraGroups = ["wheel"];
      initialPassword = "anon";
    };
  };

  # Redundant but good practice
  security.sudo.wheelNeedsPassword = true;

  system.stateVersion = "25.05";
}