{ lib, ... }:
{
  virtualisation.vmVariant = {
    virtualisation = {
      memorySize = 4096;
      cores = 2;
      graphics = false;
      sharedDirectories = {
        sops-keys = {
          source = "/home/louis/.config/sops/age";
          target = "/var/lib/sops-nix";
        };
      };
      forwardPorts = [
        {
          from = "host";
          host.port = 8080;
          guest.port = 80;
        }
      ];
    };

    fileSystems."/mnt/volume" = lib.mkForce {
      device = "none";
      fsType = "tmpfs";
      options = [
        "size=2G"
        "mode=777"
      ];
    };

    fileSystems."/mnt/box" = lib.mkForce {
      device = "none";
      fsType = "tmpfs";
      options = [
        "size=2G"
        "mode=777"
      ];
    };

    sops.age.keyFile = lib.mkForce "/var/lib/sops-nix/keys.txt";

    users.users.root.password = "root";
    services.openssh.settings.PermitRootLogin = "yes";
    services.openssh.settings.PasswordAuthentication = true;

    documentation.enable = false;
    systemd.services.NetworkManager-wait-online.enable = false;

    networking.useDHCP = lib.mkDefault true;

    services.qemuGuest.enable = true;
    networking.enableIPv6 = false;
  };
}