{
  flake,
  config,
  pkgs,
  lib,
  ...
}: {
  networking.hostId = "acab9998";
  networking.hostName = "stroopwafel";
  networking.networkmanager.wifi.backend = "wpa_supplicant";

  services.openssh.openFirewall = true;

  age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-stroopwafel.age";

  pub-solar.wireguard-client = {
    ownIPs = [
      "10.0.1.8/32"
      "fd00:b12f:acab:1312:acab:8::/96"
    ];
    wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
  };
}