{ vars, ... }:

{
  imports = [
    (import ../../modules/ipa/client.nix {
      keytabSopsFile = ../../secrets/pxe-boot.keytab;
      caCertFile     = ../../certs/ipa-ca.crt;
    })
  ];

  networking = {
    hostName = "pxe-boot";
    domain   = vars.homeDomain;
    useDHCP = false;
    interfaces.${vars.lxcLanInterface}.ipv4.addresses = [{
      address = vars.pxeServerIp;
      prefixLength = vars.lanPrefixLength;
    }];
    defaultGateway = { address = vars.lanGateway; interface = vars.lxcLanInterface; };
    nameservers = [ vars.domainControllerIp ];
  };

  # Preserved from the pre-refactor `pxe-boot` target — stateVersion must
  # never be bumped on an already-installed machine.
  system.stateVersion = "25.05";
}