{ config, ... }:

{
  # Rebuild once a day to automatically apply security patches
  system.autoUpgrade.enable = true;
  nix.optimise.automatic = true;
  nix.gc = {
    automatic = true;
    dates = "daily";
    options = "--delete-older-than 30d";
  };
}