{ modulesPath, ... }:
{
  imports = [
    (modulesPath + "/virtualisation/proxmox-lxc.nix")
  ];

  # 修复 LXC 挂载报错
  systemd.mounts = [
    { where = "/sys/kernel/debug"; enable = false; }
    { where = "/sys/fs/fuse/connections"; enable = false; }
  ];
  systemd.services."sys-kernel-debug.mount".enable = false;

  # 容器运行时设置
  nix.settings.sandbox = false;
  proxmoxLXC = {
    manageNetwork = false;
    privileged = true;
  };

  # 由宿主机处理 fstrim
  services.fstrim.enable = false;

  services.openssh = {
    enable = true;
    openFirewall = true;
    settings = {
      PermitRootLogin = "yes";
      PasswordAuthentication = true;
    };
  };

  # 用户账户配置
  users.users.luochen570 = {
    isNormalUser = true;
    extraGroups = [ "wheel" "networkmanager" ];
  };

  security.sudo.wheelNeedsPassword = false;

  services.resolved = {
    extraConfig = ''
      Cache=true
      CacheFromLocalhost=true
    '';
  };

  nix.settings.substituters = [ "https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store" ];
  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  system.stateVersion = "25.05";
}