{
  inputs,
  config,
  ...
}:
let
  nixosModules = config.flake.modules.nixos;
  account = config.repo.account;
in
{
  repo.machines.orion = {
    syncthingId = "NNRNQKZ-OWPHSVA-B6KKBHE-SDYLSTV-7SVHGPR-NEWLKPL-4MWNJG4-G5FHUAI";

    stateVersion = "24.05";
    hmStateVersion = "24.05";
  };

  flake.modules.nixos.orion =
    { ... }:
    {
      imports = [
        nixosModules.host-base

        nixosModules.sops-host-ssh-key
        nixosModules.openssh
        nixosModules.caddy
        nixosModules.server-firewall
        nixosModules.ssh-agent-auth
        nixosModules.vaultwarden
        nixosModules.radicale
        nixosModules.actual
        nixosModules.gitea
        ./_hardware.nix
        ./_disk.nix
      ];

      users.users.${account.name} = {
        linger = true;
        openssh.authorizedKeys.keys = [
          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAU2LydkXRTtNFY7oyX8JQURwXLVhB71DeK8XzrXeFX1 openpgp:0xA490D93A"
        ];
      };
    };
}