diff --git a/flake.nix b/flake.nix
index 353941e..9a7788d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -28,15 +28,37 @@
         nixosModules.minify = { ... }: {
           disabledModules = [ "profiles/base.nix" ];
           config = {
+            boot.bcache.enable = false;
+            environment.defaultPackages = [ ];
+            fonts.fontconfig.enable = false;
+            networking.firewall.enable = false;
             nix.enable = false;
-            programs.nano.enable = true;
+            programs.nano.enable = false;
+            services.lvm.enable = false;
+
+            # We could theoretically disable system-path.nix so we don't have
+            # requiredPackages, but that seems like a lot of work.
+
+            # Leave networking.useDHCP = true since we would reenable it anyway
+
+            # Just set this to something, we probably don't care
+            system.stateVersion = "23.11";
           };
         };
 
+        nixosModules.insecureRemote = { ... }: {
+          services.openssh = {
+            enable = true;
+            settings.PermitRootLogin = "yes";
+          };
+          users.users.root.initialPassword = "ohnowo";
+        };
+
         nixosConfigurations.aarch64-rpi = nixpkgs.lib.nixosSystem {
           system = "aarch64-linux";
           modules = [
             self.nixosModules.minify
+            self.nixosModules.insecureRemote
             "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
           ];
         };