{
  inputs,
  config,
  ...
}:
let
  nixosModules = config.flake.modules.nixos;
  account = config.repo.account;
in
{
  repo.machines.orion = {
    syncthingId = "NNRNQKZ-OWPHSVA-B6KKBHE-SDYLSTV-7SVHGPR-NEWLKPL-4MWNJG4-G5FHUAI";

    stateVersion = "24.05";
    hmStateVersion = "24.05";
  };

  flake.modules.nixos.orion =
    { ... }:
    {
      imports = [
        nixosModules.host-base

        nixosModules.sops-host-ssh-key
        nixosModules.openssh
        nixosModules.caddy
        nixosModules.server-firewall
        nixosModules.sudo-ssh-agent-auth
        nixosModules.vaultwarden
        nixosModules.radicale
        nixosModules.actual
        nixosModules.gitea
        ./_hardware.nix
        ./_disk.nix
      ];

      environment.enableAllTerminfo = true;

      users.users.${account.name}.linger = true;
    };
}