{
  inputs,
  config,
  lib,
  ...
}:
let
  nixosModules = config.flake.modules.nixos;
  hmModules = config.flake.modules.homeManager;
in
{
  repo.machines.orion = {
    buildFunction = config.repo.helpers.mkHost;
    module = nixosModules.orion;

    accounts = lib.getAttrs [ "kiri" ] config.repo.accounts;

    stateVersion = "24.05";
    hmStateVersion = "24.05";
  };

  flake.modules.nixos.orion =
    { ... }:
    {
      imports = [
        nixosModules.host-base
        nixosModules.sops-host-ssh-key
        nixosModules.openssh
        nixosModules.caddy
        nixosModules.server-firewall
        nixosModules.ssh-agent-auth
        nixosModules.vaultwarden
        nixosModules.radicale
        nixosModules.actual
        nixosModules.gitea
        ./_hardware.nix
        ./_disk.nix
      ];

      users.users.kiri = {
        linger = true;
        openssh.authorizedKeys.keys = [
          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAU2LydkXRTtNFY7oyX8JQURwXLVhB71DeK8XzrXeFX1 openpgp:0xA490D93A"
        ];
      };
    };
}