{
  machines.lewis = {
    kind = "physical";
    arch = "x86_64-linux";
    isHypervisor = true;

    nixosModule.lab = {
      backups.enable = true;
      data-sharing.enable = true;
      networking.dmz.allowConnectivity = true;

      storage = {
        osDisk = "/dev/sda";
        dataPartition = "/dev/nvme0n1p1";
      };

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./certificates/lewis/host_ed25519.crt;
        userCert = builtins.readFile ./certificates/lewis/user_ed25519.crt;
      };
    };
  };
}