{ config, vars, ... }:

{
  networking.hostName = vars.nixCacheHost;

  sops.secrets."beszel-token".sopsFile = ../../secrets/nix-cache.yaml;
  sops.templates."nix-cache-beszel.env".content = ''
    TOKEN=${config.sops.placeholder."beszel-token"}
  '';

  services.beszel.agent.environment = {
    #DOCKER_HOST = "tcp://docker-socket-proxy:2375";
    #HUB_URL = "http://docker.sweet.home:8090";
    KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFPR9kwtC4TAeTRu46A7+opZsYpxqkRJ+x/ZyB2GWCeG";
  };
  services.beszel.agent.environmentFile = config.sops.templates."nix-cache-beszel.env".path;

  # Preserved from the pre-refactor `nix-cache` target — stateVersion must
  # never be bumped on an already-installed machine.
  system.stateVersion = "25.05";
}