{
  inputs,
  outputs,
  config,
  ...
}:

{
  imports = [
    inputs.synix.nixosModules.openssh

    outputs.nixosModules.forgejo-runner
    outputs.nixosModules.syncthing
  ];

  services.openssh.enable = true;

  # bootstrap
  # services.syncthing.enable = true;
  # services.syncthing.guiAddress = "0.0.0.0:8384";

  services.forgejo-runner = {
    enable = true;
    url = "https://git.sid.ovh";
    tokenFile = config.sops.templates."forgejo-runner/token".path;
    label = "runner";
  };

  sops = {
    secrets."forgejo-runner/token" = { };
    templates."forgejo-runner/token".content = ''
      TOKEN=${config.sops.placeholder."forgejo-runner/token"}
    '';
  };
}