{ config, ... }:
let
  hosts = import ../../modules/hosts.nix;
in
{
  imports = [
    ../../modules/static-ipv6.nix
    ../../modules/monitoring/exporters.nix
    ../../modules/web-proxy.nix
  ];

  clan.core.sops.defaultGroups = [ "admins" ];

  # Public IPv6 (from modules/hosts.nix); SLAAC doesn't bring it up here.
  cnx.staticIPv6 = {
    enable = true;
    address = hosts.${config.networking.hostName}.ipv6;
  };

  services.timesyncd.enable = true;
}