{ config, lib, pkgs, ... }:
let

  # external-ip = config.krebs.build.host.nets.internet.ip4.addr;
  # internal-ip = config.krebs.build.host.nets.retiolum.ip4.addr;
  # default-gw = "185.215.224.1";
  # prefixLength = 24;
  # external-mac = "46:5b:fc:f4:44:c9";
  # ext-if = "et0";
in {

  imports = [
      ./1blu
      <stockholm/makefu>

      # common
      <stockholm/makefu/2configs/nur.nix>
      <stockholm/makefu/2configs/home-manager>
      <stockholm/makefu/2configs/home-manager/cli.nix>

      # Security
      <stockholm/makefu/2configs/sshd-totp.nix>

      # Tools
      <stockholm/makefu/2configs/tools/core.nix>
      <stockholm/makefu/2configs/zsh-user.nix>

      # NixOS Build
      <stockholm/makefu/2configs/remote-build/slave.nix>

      # Storage
      <stockholm/makefu/2configs/share>
      <stockholm/makefu/2configs/share/hetzner-client.nix>

      # Services:
      <stockholm/makefu/2configs/nix-community/mediawiki-matrix-bot.nix>

      # torrent is managed by gum
      # <stockholm/makefu/2configs/torrent/rtorrent.nix>

      ## Web

      # local usage:
      <stockholm/makefu/2configs/mosh.nix>
      <stockholm/makefu/2configs/bitlbee.nix>

      # Supervision
      <stockholm/makefu/2configs/nix-community/supervision.nix>

      # Krebs
      <stockholm/makefu/2configs/tinc/retiolum.nix>

      # backup
      <stockholm/makefu/2configs/backup/state.nix>


  ];
  krebs = {
    enable = true;
    build.host = config.krebs.hosts.latte;
  };

  makefu.dl-dir = "/media/cloud/download";
  networking.firewall.allowedTCPPorts = [ 80 443 ];

}