{ config, lib, ... }:
let
  cfg = config.modules.guest; # NOLINT(let_order)
in
{
  options.modules.guest.enable = lib.mkEnableOption "nested-guest base configuration";

  config = lib.mkIf cfg.enable {
    modules.network.ssh.enable = lib.mkDefault false;
    modules.network.ssh.hostKeys.restore = lib.mkDefault false;
  };
}