{ config, ... }:
let
  nixosModules = config.flake.modules.nixos;
in
{
  facts.machines.orion = {
    system = "x86_64-linux";
    syncthingId = "NNRNQKZ-OWPHSVA-B6KKBHE-SDYLSTV-7SVHGPR-NEWLKPL-4MWNJG4-G5FHUAI";

    stateVersion = "24.05";
  };

  flake.modules.nixos.orion = { pkgs, ... }: {
    imports = [
      nixosModules.host-base

      nixosModules.sops-host-ssh-key
      nixosModules.openssh
      nixosModules.caddy
      nixosModules.server-firewall
      nixosModules.sudo-ssh-agent-auth
      nixosModules.vaultwarden
      nixosModules.radicale
      nixosModules.actual
      nixosModules.gitea
      nixosModules.transcription
      nixosModules.wardrowbe
      ./_hardware.nix
      ./_disk.nix
    ];

    # SSH clients on both workstations use Kitty.
    environment.systemPackages = [ pkgs.kitty.terminfo ];

    users.users.${config.facts.account.name}.linger = true;
  };
}