{ config, ... }:

{
  networking.hostName = "server";
  networking.hostId = "6689f93e";

  sops.secrets."beszel-token".sopsFile = ../../secrets/server.yaml;
  sops.templates."server-beszel.env".content = ''
    TOKEN=${config.sops.placeholder."beszel-token"}
  '';

  services.beszel.agent.environment = {
    #DOCKER_HOST = "tcp://docker-socket-proxy:2375";
    #HUB_URL = "http://docker.sweet.home:8090";
    KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFPR9kwtC4TAeTRu46A7+opZsYpxqkRJ+x/ZyB2GWCeG";
    EXTRA_FILESYSTEMS = "/tank/docker/volumes";
    LOG_LEVEL = "debug";
  };
  services.beszel.agent.environmentFile = config.sops.templates."server-beszel.env".path;

  # Preserved from the pre-refactor `server` target — stateVersion must never
  # be bumped on an already-installed machine.
  system.stateVersion = "25.05";
}