{ lib, ... }:
{
  systemd.tmpfiles.rules = [
    "L /var/lib/bluetooth - - - - /persist/var/lib/bluetooth"
    "d /persist/var/lib/bluetooth 0500 root root"

    "L /var/lib/docker - - - - /persist/var/lib/docker"
    "d /persist/var/lib/docker 0510 root root"

    "d /persist/etc/NetworkManager/system-connections 0500 root root"

    "d /persist/etc/ssh 0400 root root"
  ];

  environment.etc."NetworkManager/system-connections" = {
    source = "/persist/etc/NetworkManager/system-connections/";
  };

  services.openssh = {
    enable = true;
    hostKeys = [
      {
        path = "/persist/etc/ssh/ssh_host_ed25519_key";
        type = "ed25519";
      }
      {
        path = "/persist/etc/ssh/ssh_host_rsa_key";
        type = "rsa";
        bits = 4096;
      }
    ];
  };
}