{
  config,
  lib,
  ...
}:

let
  inherit (lib) mkDefault mkForce;
in
{
  _class = "nixos";

  imports = [
    ../common/options.nix
    ../common/nixos
    ./forgejo-actions-runner.nix
  ];

  fediversityVm = {
    # XXX this needs an SSH config entry to locate and access the machine
    name = "forgejo-ci";
    domain = "procolix.com";

    ipv4 = {
      interface = "enp1s0f0";
      address = "192.168.201.65";
      prefixLength = 24;
      gateway = "192.168.201.1";
    };
    ipv6.enable = false;
  };

  networking = {
    nftables.enable = mkForce false;
    hostId = "1d6ea552";
  };

  hardware.cpu.intel.updateMicrocode = mkDefault config.hardware.enableRedistributableFirmware;

  fileSystems."/" = {
    device = "rpool/root";
    fsType = "zfs";
  };

  fileSystems."/home" = {
    device = "rpool/home";
    fsType = "zfs";
  };

  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/50B2-DD3F";
    fsType = "vfat";
    options = [
      "fmask=0077"
      "dmask=0077"
    ];
  };
}