{ config, pkgs, ... }:
{
  imports = [
    ../../configs
    ../../configs/retiolum.nix
    ../../configs/syncthing.nix
    ../../configs/services/radio
    ../../configs/autoupdate.nix
  ];

  clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";

  system.stateVersion = "24.05";

  security.acme = {
    acceptTerms = true;
    defaults.email = "acme@lassul.us";
  };

  lass.sync-containers3.inContainer = {
    enable = true;
    pubkey = config.clan.core.vars.generators.radio-sync.files."radio.sync.pub".value;
  };

  clan.core.vars.generators.radio-sync = {
    files."radio.sync.key" = { };
    files."radio.sync.pub".secret = false;
    runtimeInputs = with pkgs; [
      coreutils
      openssh
    ];
    script = ''
      ssh-keygen -t ed25519 -N "" -f "$out"/radio.sync.key
      mv "$out"/radio.sync.key.pub "$out"/radio.sync.pub
    '';
  };
}