{config, ...}: {
  config = {
    facter.reportPath = ./facter.json;
    system.stateVersion = "23.05";
    users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
    pim.k3s.serverAddr = "https://jefke.dmz:6443";

    pim.backups.borgBackups = {
      freshrss = {
        paths = ["/mnt/longhorn/persistent/volumes/freshrss"];
        deploymentName = "server";
        deploymentNamespace = "freshrss";
      };

      nextcloud = {
        paths = ["/mnt/longhorn/persistent/volumes/nextcloud"];
        deploymentName = "server";
        deploymentNamespace = "nextcloud";
      };

      nextcloud-db = {
        paths = ["/mnt/longhorn/persistent/volumes/nextcloud-db"];
        deploymentName = "database";
        deploymentNamespace = "nextcloud";
      };

      authentik = {
        paths = ["/mnt/longhorn/persistent/volumes/authentik-db" "/mnt/longhorn/persistent/volumes/authentik-redis"];
        scaleDeployments = false;
      };
    };

    deployment = {
      targetHost = "atlas";
      targetUser = "root";
      tags = ["server" "kubernetes"];
    };
  };
}