{
  description = "Live Disk Flake";

  inputs = {
    nixpkgs.url = "nixpkgs/nixos-21.05";

    fudo-home = {
      url = "git+https://git.fudo.org/fudo-nix/home.git";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    # This MUST be a clean git repo, because we use the timestamp.
    fudo-entities = {
      url = "git+https://git.fudo.org/fudo-nix/entities.git";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    fudo-lib = {
      url = "git+https://git.fudo.org/fudo-nix/lib.git";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    fudo-pkgs.url = "git+https://git.fudo.org/fudo-nix/pkgs.git";
  };

  outputs = { self, nixpkgs, fudo-home, fudo-entities, fudo-lib, fudo-pkgs, ...
    }@inputs: {
      nixosConfigurations.live-disk-x86_64-linux = let
        system = "x86_64-linux";
        pkgs = import nixpkgs {
          inherit system;
          config.allowUnfree = true;
          overlays = [ fudo-pkgs.overlay ];
        };
      in {
        inherit system;
        modules = [
          ({ config, ... }: {
            imports = [
              fudo-home.nixosModule
              "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
              "${nixpkgs}/nixos/modules/installer/cd-dvd/channel.nix"
            ];
            config = with pkgs.lib; {
              environment.etc.nixos-live.source = ./.;
              hardware.enableAllFirmware = true;
              environment.systemPackages = with pkgs; [
                btrfs-progs
                emacs
                git
                parted
                gparted
                nix-prefetch-scripts
                wget
              ];

              services.openssh = {
                enable = true;
                startWhenNeeded = true;
                permitRootLogin = mkDefault "prohibit-password";
              };

              i18n.defaultLocale = "en_US.UTF-8";
              console.useXkbConfig = true;

              services.xserver = {
                layout = "us";
                xkbVariant = "dvp";
                xkbOptions = "ctrl:nocaps";
              };

              nix = {
                package = pkgs.nixFlakes;
                extraOptions = "experimental-features = nix-command flakes";
              };

              programs = {
                ssh = {
                  startAgent = true;

                  package = pkgs.openssh_gssapi;

                  extraConfig = ''
                    GSSAPIAuthentication yes
                    GSSAPIDelegateCredentials yes
                  '';
                };
              };

              krb5.libdefaults.default_realm = "FUDO.ORG";

              users.users = {
                niten = {
                  isNormalUser = true;
                  createHome = true;
                  hashedPassword =
                    "$6$a1q2Duoe35hd5$IaZGXPfqyGv9uq5DQm7DZq0vIHsUs39sLktBiBBqMiwl/f/Z4jSvNZLJp9DZJYe5u2qGBYh1ca.jsXvQA8FPZ/";
                  extraGroups = [ "wheel" ];
                };

                root.openssh.authorizedKeys.keys = [
                  "ssh-rsa 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"
                ];
              };
            };
          })
        ];
      };
    };
}