{ config, lib, ... }:
with lib;
{
  ###### interface
  options = {
    boot.cleanTmpDir = mkOption {
      type = types.bool;
      default = false;
      description = ''
        Whether to delete all files in /tmp during boot.
      '';
    };
    boot.tmpOnTmpfs = mkOption {
      type = types.bool;
      default = false;
      description = ''
         Whether to mount a tmpfs on /tmp during boot.
      '';
    };
  };
  ###### implementation
  config = {
    systemd.mounts = mkIf config.boot.tmpOnTmpfs [
      {
        what = "tmpfs";
        where = "/tmp";
        type = "tmpfs";
        mountConfig.Options = [ "mode=1777" "strictatime" "rw" "nosuid" "nodev" "size=50%" ];
      }
    ];
    systemd.tmpfiles.rules = optional config.boot.cleanTmpDir "D! /tmp 1777 root root";
  };
}