{ lib, ... }:
let
  hosts = lib.mapAttrs (machine: _: {
    ip = if builtins.pathExists ../machines/${machine}/facts/zerotier-ip then
      builtins.readFile ../machines/${machine}/facts/zerotier-ip
    else
      null;
  }) (builtins.readDir ../machines);

  filteredHosts = lib.filterAttrs (name: host: host.ip != null) hosts;
in
{
  services.zerotierone.joinNetworks = [ "7c31a21e86f9a75c" ];
  services.zerotierone.localConf.settings = {
    interfacePrefixBlacklist = [ "ygg" "mesh" "retiolum" "wiregrill" ];
    physical = {
      "10.243.0.0/16".blacklist = true;
      "10.244.0.0/16".blacklist = true;
      "42::/16".blacklist = true;
    };
  };

  networking.extraHosts = lib.concatMapStringsSep "\n" (host:
    "${host.value.ip} ${host.name}.z"
  ) (lib.attrsToList filteredHosts);
}