{
  pkgs,
  lib,
  config,
  ...
}:
{
  # auto-nice daemon
  services.ananicy = with pkgs; {
    package = ananicy-cpp;
    enable = true;
  };

  # eBPF optimizer
  services.bpftune.enable = true;

  # entropy generator
  services.haveged.enable = true;

  # interrupt balancer
  services.irqbalance.enable = true;

  # systemd tunning
  systemd = {
    # Due to a bug in systemd-networkd: https://github.com/systemd/systemd/issues/29388
    # we cannot use systemd-networkd-wait-online.
    network.wait-online.enable = false;
    tpm2.enable = false;
  };
}