{
  inputs,
  config,
  pkgs,
  lib,
  ...
}: let
  inherit (lib.strings) optionalString versionAtLeast;
  inherit (lib.lists) optional;
  inherit (lib.modules) mkIf;
in {
  nix = {
    nixPath = ["nixpkgs=${inputs.nixpkgs}"];
    extraOptions =
      optionalString
      (versionAtLeast config.nix.package.version "2.4") ''
        experimental-features = nix-command flakes
      '';
    settings.system-features = lib.optional (pkgs.system == "aarch64-linux") "native-arm64";
    settings.trusted-users = ["root" "@wheel"];
  };
  nixpkgs = mkIf (!config.boot.isContainer) {
    config = {
      allowUnfree = true;

      permittedInsecurePackages = [];
    };
    overlays = [
      (import ../../overlay)

      inputs.vaultui.overlays.default
      inputs.musicutil.overlays.default
      inputs.piped-flake.overlays.default

      (_prev: final: {
        piped-backend-deps =
          final.piped-backend-deps.overrideAttrs
          {
            # Won't build due to this; added a native-arm64 to all builders on arm64
            # https://github.com/NixOS/nixpkgs/issues/255780
            requiredSystemFeatures = ["native-arm64"];
          };
        piped-backend =
          final.piped-backend.overrideAttrs
          {
            # Won't build due to this; added a native-arm64 to all builders on arm64
            # https://github.com/NixOS/nixpkgs/issues/255780
            requiredSystemFeatures = ["native-arm64"];
          };
      })
    ];
  };
  environment.etc."nixpkgs-commit".text = inputs.nixpkgs-unstable.rev;
}