{
  pkgs,
  lib,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
  ];

  networking.hostName = "kronos";
  boot.kernelPackages = pkgs.linuxPackages_hardened;

  services.illum.enable = false; # Disable illum because I've never noticed it working and it crashes on hardened kernel

  # TODO: Harden the kernel even further (https://wiki.nixos.org/wiki/NixOS_Hardening)
  # security.lockKernelModules = true;
}