{
  security.polkit.enable = true;
  system.autoUpgrade = {
    enable = true;
    flake = "git+https://k3t.dev/git/nixconf.git?branch=main";
    operation = "boot";
    allowReboot = true;
    rebootWindow = { lower = "10:00"; upper = "14:00"; };
  };
}