{ vars, ... }:
{
  imports = [
    (import ../../modules/beszel/host-token.nix {
      name = "ha-server-2";
      sopsFile = ../../secrets/ha-server-2.yaml;
    })
  ];

  networking = {
    hostName = vars.haServer2Host;
    hostId = "7e8f9a0b";
    useDHCP = false;
    interfaces.${vars.vmLanInterface}.ipv4.addresses = [{
      address = vars.haServer2Ip;
      prefixLength = vars.lanPrefixLength;
    }];
    interfaces.${vars.vmStorageInterface}.ipv4.addresses = [{
      address = vars.haServer2StorageIp;
      prefixLength = vars.haStoragePrefixLength;
    }];
    defaultGateway = { address = vars.lanGateway; interface = vars.vmLanInterface; };
    nameservers = [ vars.domainControllerIp ];
  };

  # Set KEY after pairing this host with the beszel hub; the token is sops-managed.
  services.beszel.agent.environment.KEY = "";

  system.stateVersion = "26.05";
}