{config, ...}: {
  config = {
    facter.reportPath = ./facter.json;
    # TODO: should set this automatically
    networking.hostName = "atlas";
    system.stateVersion = "23.05";
    users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
    # TODO: set this as a default?
    sops.age.keyFile = "/root/.config/sops/age/keys.txt";

    deployment = {
      targetHost = "atlas";
      targetUser = "root";
      tags = ["server" "kubernetes"];
    };

    pim = {
      sops-nix.usersWithSopsKeys = ["root"];
      k3s.serverAddr = "https://jefke.dmz:6443";
    };
  };
}