{
  config,
  tree,
  modulesPath,
  pkgs,
  lib,
  ...
}: {
  imports = with tree; [
    (modulesPath + "/installer/cd-dvd/installation-cd-graphical-gnome.nix")
    (modulesPath + "/installer/cd-dvd/channel.nix")

    users.root
    profiles.base
    profiles.sshd
    profiles.kernels.latest
    profiles.connectivity.ios
    profiles.connectivity.network_manager
  ];

  # disable zfs
  nixpkgs.overlays = [
    (final: super: {
      zfs = super.zfs.overrideAttrs (_: {
        meta.platforms = [];
      });
    })
  ];

  networking.wireless.enable = lib.mkForce false;

  nixpkgs.config.allowBroken = true;

  home-manager.users.root = {
    imports = with tree; [home.base home.dev];
    home.stateVersion = "23.05";
  };

  home-manager.users.nixos = {
    imports = with tree; [home.base home.dev];
    home.stateVersion = "23.05";
  };

  isoImage = {
    isoBaseName = "nixos-chaos";
    compressImage = false;
    squashfsCompression = "zstd -Xcompression-level 1";
  };

  services.openssh.settings.PermitRootLogin = lib.mkForce "yes";
}