{
  config,
  lib,
  fleetFlake,
  ...
}: {
  nix = {
    optimise.automatic = true;

    settings = {
      auto-optimise-store = true;
      trusted-users = [
        "root"
        config.ccr.username
        "@wheel"
      ];
      netrc-file = "/etc/nix/netrc";
      substituters = [
        "https://cache.aciceri.dev"
      ];
      trusted-public-keys = [
        "cache.aciceri.dev~1:nJMfcBnYieY2WMbYDG0s9S5qUhU+V4RPL+X9zcxXxZY="
      ];
    };

    extraOptions = ''
      experimental-features = nix-command flakes ca-derivations impure-derivations
      builders-use-substitutes = true
    '';

    gc = {
      automatic = true;
      dates = "weekly";
      options = "--delete-older-than 180d";
    };

    registry = lib.mkForce {
      nixpkgs.to = {
        type = "path";
        path = fleetFlake.inputs.nixpkgsUnstable;
      };
      nixpkgsUnstable.to = {
        type = "path";
        path = fleetFlake.inputs.nixpkgsUnstable;
      };
      nixpkgsStable.to = {
        type = "path";
        path = fleetFlake.inputs.nixpkgsStable;
      };
      n.to = {
        type = "path";
        path = fleetFlake.inputs.nixpkgsUnstable;
      };
      nixfleet.to = {
        type = "path";
        path = "/home/${config.ccr.username}/projects/aciceri/nixfleet";
      };
      fleet.to = {
        type = "path";
        path = "/home/${config.ccr.username}/projects/aciceri/nixfleet";
      };
      ccrEmacs.to = {
        type = "path";
        path = "/home/${config.ccr.username}/.config/emacs";
      };
    };

    distributedBuilds = true;
    buildMachines = [
      {
        hostName = "sisko.fleet";
        system = "aarch64-linux";
        maxJobs = 4;
        supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
        protocol = "ssh-ng";
        sshUser = "root";
        sshKey = "/home/${config.ccr.username}/.ssh/id_rsa";
      }
      {
        hostName = "mac.staging.mlabs.city";
        system = "x86_64-darwin";
        maxJobs = 4;
        supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
        protocol = "ssh-ng";
        sshUser = "root";
        sshKey = "/home/${config.ccr.username}/.ssh/id_rsa";
      }
    ];
  };
}