{ ... }:

{
  # fixes run0 failing to execute
  security.pam.services.systemd-run0 = { };
  systemd = {
    sleep.extraConfig = ''
      HibernateDelaySec=2h
    '';
    oomd = {
      enable = true;
      enableSystemSlice = true;
      enableRootSlice = true;
      enableUserSlices = true;
    };
    watchdog = {
      runtimeTime = "30s";
      rebootTime = "10m";
    };
  };
}