{...}: {
  users.mutableUsers = false;
  system.autoUpgrade = {
    randomizedDelaySec = "15min";
    allowReboot = true;
    rebootWindow = {
      lower = "02:00";
      upper = "05:00";
    };
  };
}