{
  flake,
  config,
  pkgs,
  lib,
  ...
}: {
  networking.hostName = "chocolatebar";

  age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-chocolatebar.age";

  pub-solar.wireguard.private = {
    ownIPs = [
      "10.13.12.5/32"
      "fd00:b12f:acab:1312:acab:5::/96"
    ];
    privateKeyFile = config.age.secrets.wg-private-key.path;
  };

  age.secrets.wg-pub-solar-key.file = "${flake.self}/secrets/wg-pub-solar-chocolatebar.age";

  pub-solar.wireguard.pub-solar = {
    ownIPs = [
      "10.7.6.205/32"
      "fd00:fae:fae:fae:fae:205::/96"
    ];
    privateKeyFile = config.age.secrets.wg-pub-solar-key.path;
  };

  age.secrets.wg-momo-key.file = "${flake.self}/secrets/wg-momo-chocolatebar.age";

  pub-solar.wireguard.momo = {
    ownIPs = [
      "10.30.30.205/32"
      "fd00:3030:3030:3030:3030:205::/96"
    ];
    privateKeyFile = config.age.secrets.wg-momo-key.path;
  };

  age.secrets.wg-ehex-key.file = "${flake.self}/secrets/wg-ehex-chocolatebar.age";

  pub-solar.wireguard.ehex = {
    ownIPs = [
      "10.42.0.160/22"
    ];
    privateKeyFile = config.age.secrets.wg-ehex-key.path;
  };
}