{config, ...}: {
  users.mutableUsers = false;
  system.autoUpgrade = {
    flake = "git+${config.nix.registry.nixos.to.url}";
    randomizedDelaySec = "15min";
    allowReboot = true;
    rebootWindow = {
      lower = "02:00";
      upper = "05:00";
    };
  };
}