{ vars, ... }:
{
  networking = {
    hostName = vars.haServer2Host;
    hostId = "7e8f9a0b";
    useDHCP = false;
    interfaces.ens18.ipv4.addresses = [{
      address = vars.haServer2Ip;
      prefixLength = 24;
    }];
    defaultGateway = "192.168.2.1";
    nameservers = [ "192.168.2.1" "8.8.8.8" ];
  };

  # TODO: after running `bash scripts/secrets/sync-host-keys.sh proxmox-ha-server-2`
  # add beszel agent pairing and sops-managed corosync authkey:
  #   imports = [ (import ../../modules/beszel/host-token.nix {
  #     name = "ha-server-2";
  #     sopsFile = ../../secrets/ha-server-2.yaml;
  #   }) ];
  #   services.beszel.agent.environment.KEY = "...";

  system.stateVersion = "26.05";
}