{
  lib,
  namespace,
  ...
}:
with lib;
let
  inherit (lib.${namespace}) disabled;
in
{
  specialisation = {
    safe-mode = {
      configuration = {
        boot = {
          kernelParams = [ ];
          initrd.verbose = true;
          consoleLogLevel = 3;
        };
        ${namespace} = {
          sops.enable = true;
          services = {
            actual = mkForce disabled;
            ai = mkForce disabled;
            arrs = mkForce disabled;
            attic = mkForce disabled;
            authentik = mkForce disabled;
            authentikRac = mkForce disabled;
            calibre = mkForce disabled;
            calibre-web = mkForce disabled;
            code-server = mkForce disabled;
            collabora = mkForce disabled;
            crowdsec = mkForce disabled;
            dispatcharr = mkForce disabled;
            tunarr = mkForce disabled;
            free-games-claimer = mkForce disabled;
            gitea = mkForce disabled;
            glance = mkForce disabled;
            glances = mkForce disabled;
            headscale = mkForce disabled;
            immich = mkForce disabled;
            jellyfin = mkForce disabled;
            seerr = mkForce disabled;
            lubelogger = mkForce disabled;
            manyfold = mkForce disabled;
            matrix = mkForce disabled;
            minecraft = mkForce disabled;
            mongodb = mkForce disabled;
            netbootxyz = mkForce disabled;
            nextcloud = mkForce disabled;
            ntfy = mkForce disabled;
            ocis = mkForce disabled;
            onlyoffice = mkForce disabled;
            opencloud = mkForce disabled;
            orca-slicer = mkForce disabled;
            paperless = mkForce disabled;
            paperless-ai = mkForce disabled;
            protonmail-bridge = mkForce disabled;
            restic-server = mkForce disabled;
            sunshine = mkForce disabled;
            tdarr = mkForce disabled;
            unmanic = mkForce disabled;
            uptime-kuma = mkForce disabled;
            wyoming = mkForce disabled;
          };
        };

        services = {
          postgresql = mkForce disabled;
        };
      };
    };
  };
}