{ lib, modulesPath, pkgs, ... }:
{
  imports = [ (modulesPath + "/virtualisation/proxmox-lxc.nix") ];

  nix.settings.sandbox = false;

  proxmoxLXC = {
    manageNetwork = false;
    privileged = true;
  };

  services.fstrim.enable = false;

  services.openssh.settings = {
    PermitRootLogin = lib.mkForce "yes";
    PasswordAuthentication = true;
    PermitEmptyPasswords = "yes";
  };

  environment.systemPackages = [ pkgs.intel-gpu-tools pkgs.libva-utils ];

  hardware.enableRedistributableFirmware = true;
  hardware.graphics = {
    enable = true;
    extraPackages = [ pkgs.intel-media-driver pkgs.intel-compute-runtime ];
  };

}