{pkgs, ...}: {
  services.cron.enable = false;
  security.pki.certificateFiles = [
    ./certs/proxy
  ];
  networking.dhcpcd.extraConfig = "noarp";
  system.stateVersion = "21.05";
}