{
  config,
  lib,
  ...
}:
{
  
  # systemd.tmpfiles.rules = lib.singleton "D! ${tmp-exec} 1777 root root";
  
  systemd.tmpfiles.settings."mount"."/mnt".d = {
    group = "root";
    mode = "755";
    user = "root";
  };

  systemd.tmpfiles.rules = [
    "D! /var/cache 0755 root root 7d"
    "e! /var/.Trash-0 0755 root root 14d"
    "D! /var/tmp 0755 root root 14d"
    # "D! /root 0700 root root"
  ];

  systemd.user.tmpfiles.users =
    let
      forEachUser = fn: lib.mapAttrsToList fn { inherit (config.users.users) grimmauld root; };
    in
    lib.mergeAttrsList (
      forEachUser (
        name: user: {
          "${name}".rules = [
            # "d /home/${user}/Downloads - - - 14d"
            "e ${user.home}/.vim/undodir - - - 7d"
            "d ${user.home}/.cache - - - 7d"
            "e ${user.home}/.java - - - 7d"
            "e ${user.home}/.gradle - - - 7d"
            "e ${user.home}/.cargo - - - 7d"
            "e ${user.home}/.rustup - - - 7d"
            "e ${user.home}/.templateengine - - - 7d"
            "e ${user.home}/.sane - - - 7d"
            "e ${user.home}/.dotnet - - - 7d"
            "e ${user.home}/.nuget - - - 7d"
            # "d /home/${user}/.local/state/mpv/watch_later - - - 14d"
          ];
        }
      )
    );
  }