{ lib
, pkgs
, config
, ...
}:
with lib; let
  cfg = config.eboskma.nix-common;
in
{
  options.eboskma.nix-common = {
    enable = mkEnableOption "nix-common";
    remote-builders = mkEnableOption "remote builders";
    cross-systems = mkOption {
      description = "list of systems to cross compile for";
      type = with types; listOf str;
      default = [ ];
    };
  };

  imports = [
    (mkRemovedOptionModule [ "eboskma" "nix-common" "disable-cache" ]
      "The option `disable-cache` is no longer used")
  ];

  config = mkIf cfg.enable {
    # nixpkgs = {
    #   config.allowUnfree = true;
    # };

    nix = {
      package = pkgs.nixVersions.stable;
      extraOptions = ''
        experimental-features = nix-command flakes
      '';

      buildMachines = mkIf cfg.remote-builders [
        {
          hostName = "loki";
          systems = [ "x86_64-linux" ] ++ cfg.cross-systems;
          maxJobs = 8;
          speedFactor = 2;
          supportedFeatures = [ "kvm" "big-parallel" "nixos-test" "benchmark" ];
        }
      ];
      distributedBuilds = cfg.remote-builders;

      settings = {
        auto-optimise-store = true;
        allowed-users = [ "root" ];
        trusted-users = [ "root" "@wheel" ];
        substituters = [
          "https://nix-community.cachix.org"
          "https://marcus7070.cachix.org"
          "https://hyprland.cachix.org"
        ];

        trusted-public-keys = [
          "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
          "marcus7070.cachix.org-1:JawxHSgnYsgNYJmNqZwvLjI4NcOwrcEZDToWlT3WwXw="
          "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
        ];
      };

      gc = {
        automatic = true;
        dates = "daily";
        options = "--delete-older-than=30d";
      };
    };

    boot.binfmt.emulatedSystems = cfg.cross-systems;

    programs.ssh.extraConfig = mkIf cfg.remote-builders ''
      Host loki
        HostName 10.0.0.4
        Port 22
        User builder
        IdentitiesOnly yes
        IdentityFile /root/.ssh/id_builder
    '';
  };
}