{pkgs, ... }:
{
  boot.loader.raspberryPi.version = 3;
  boot.initrd.kernelModules = [ "vc4" "bcm2835_dma" "i2c_bcm2835" ];
  
  networking.hostName = "orange";
  nixpkgs.hostPlatform.system = "aarch64-linux";
  system.stateVersion = "23.05";
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  
  hardware.opengl.enable = true;

  environment.systemPackages = with pkgs; [
    graphfix xorg.xauth xorg.xinit
 ];
  
  users = {
    mutableUsers = false;
    users = {
      root.openssh.authorizedKeys.keyFiles = [
        ./authorized_keys
      ];
      appuser = {
        isNormalUser = true;
        group = "appuser";
        password = "";
        packages = with pkgs; [
          graphfix
        ];
      };
    };
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = false;
  };
}