{ config, lib, pkgs, modulesPath, desktop, username, ... }: {
  imports = [ 
    # This machine won't be using secureboot
    # ../../common/modules/boot.nix
    ./disks.nix
  ];
  nixpkgs.config.allowUnfree = false;
  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;

  boot.initrd.availableKernelModules = [ "ata_piix" "ohci_pci" "virtio_pci" "virtio_blk" "sr_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  virtualisation.hypervGuest.enable = true;

  networking.useDHCP = lib.mkDefault true;
  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  time.timeZone = "Asia/Tokyo";
  networking.hostName = "osaka-vultr-01";
  
  networking.firewall.allowedTCPPorts = [ 22 ];
}