{ self, config, pkgs, ... }:

{
  config = {
    age.secrets.home_controller_k3s_token.file = "${self}/secrets/home_controller_k3s_server_token.age";
    age.secrets.home_controller_wireguard.file = "${self}/secrets/home_controller_cube_wireguard_key.age";

    pub-solar.home-controller = {
      enable = true;
      role = "agent";
      ownIp = "10.0.1.5";

      k3s = {
        enableLocalStorage = false;
        enableZfs = false;
        serverAddr = "https://api.kube:6443";
        tokenFile = "/run/agenix/home_controller_k3s_token";
      };

      wireguard = {
        privateKeyFile = "/run/agenix/home_controller_wireguard";
        peers = [
          {
            # giggles
            publicKey = "i5kiTSPGR2jrdHl+s/S6D0YWb+xkbPudczG2RWmWwCg=";
            allowedIPs = [ "10.0.1.11/32" ];
          }
          {
            # cox
            publicKey = "VogQYYYNdXLhPKY9/P2WAn6gfEX9ojN3VD+DKx4gl0k=";
            allowedIPs = [ "10.0.1.12/32" ];
          }
          {
            # companion
            publicKey = "7EUcSUckw/eLiWFHD+AzfcoKWstjr+cL70SupOJ6zC0=";
            allowedIPs = [ "10.0.1.13/32" ];
          }

          {
            # hsha
            publicKey = "sC0wWHE/tvNaVYX3QQTHQUmSTTjZMOjkQ5x/qy6qjTc=";
            allowedIPs = [ "10.0.1.254/32" ];
          }
        ];
      };
    };
  };
}