{
  self,
  lib,
  config,
  hostPkgs,
  ...
}:
{
  name = "service-apple-network";

  result.update-vars =
    let
      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
    in
    hostPkgs.writeShellScriptBin "update-vars" ''
      set -x
      export PRJ_ROOT=$(git rev-parse --show-toplevel)
      ${
        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
    '';

  clan = {
    directory = ./.;
    test.useContainers = false;

    inventory = {
      meta.domain = "test.clan";

      machines.peer1 = { };
      machines.peer2 = { };
      machines.peer3 = { };

      instances = {
        apple-network = {
          module.name = "@clan/apple-network";
          module.input = "self";
          roles.peer.machines = {
            peer1 = { };
            peer2 = { };
            peer3 = { };
          };
        };
        yggdrasil = {
          module.name = "yggdrasil";
          roles.default.tags.all = { };
          roles.default.settings.extraPeers = [
            "tls://ygg.jjolly.dev:3443"
            "tls://[2602:fc24:18:7a42::1]:993"
            "tcp://leo.node.3dt.net:9002"
            "tcp://ygg-kcmo.incognet.io:8883"
          ];
        };
      };
    };
  };

  nodes = {
    peer1 = { };
    peer2 = { };
    peer3 = { };
  };

  testScript = _: ''
    # cannot test connectivity due to Yggdrasil's establishment
    start_all()
    peer1.wait_for_unit("atalkd")
    peer1.succeed("systemctl status atalkd")

    peer2.wait_for_unit("atalkd")
    peer2.succeed("systemctl status atalkd")

    peer3.wait_for_unit("atalkd")
    peer3.succeed("systemctl status atalkd")
  '';
}