{
  flake.modules.homeManager.yookr-tools =
    { pkgs, ... }:
    let
      tools = import ./_support/packages.nix { inherit pkgs; };
    in
    {
      programs.zsh.initContent = "source <(gardenctl rc zsh --no-completion)";
      home.packages = [
        tools.gardenctl
        tools.gardenlogin
      ];
    };

  flake.modules.nixos.yookr-dev = {
    security.pki.certificateFiles = [
      ./zenith-rootCA.pem
      ./polaris-rootCA.pem
    ];

    networking.firewall.allowedTCPPorts = [
      5173
      5174
    ];

    networking.extraHosts = ''
      127.0.0.1 local.management.yookr.org
      127.0.0.1 local.dashboard.yookr.org
    '';
  };
}