{
  inputs,
  config,
  pkgs,
  ...
}:
{
  imports = [
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
        "1b495eede9" # kurogeek-thinkpad
      ];
    })

    inputs.self.nixosModules.inventree
  ];

  nixpkgs.overlays = [
    inputs.self.overlays.default
  ];

  clan.core.vars.generators.inventree = {
    files = {
      secret-key = {
        owner = "inventree";
        group = "inventree";
        secret = true;
      };
      oidc-key = {
        owner = "inventree";
        group = "inventree";
        secret = true;
      };
    };
    runtimeInputs = [ pkgs.pwgen ];
    script = ''
      pwgen -s 32 1 > $out/secret-key
      pwgen -s 32 1 > $out/oidc-key
    '';
  };

  services.inventree = {
    enable = true;
    hostName = "rigel.local";
    config.site_url = "http://${config.services.inventree.hostName}";
    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
  };

  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
}