{ vars, ... }:
{
  networking = {
    hostName = vars.haServer1Host;
    hostId = "3a4b5c6d";
    useDHCP = false;
    interfaces.ens18.ipv4.addresses = [{
      address = vars.haServer1Ip;
      prefixLength = 24;
    }];
    defaultGateway = "192.168.2.1";
    nameservers = [ "192.168.2.1" "8.8.8.8" ];
  };

  # TODO: after running `bash scripts/secrets/sync-host-keys.sh proxmox-ha-server-1`
  # add beszel agent pairing and sops-managed corosync authkey:
  #   imports = [ (import ../../modules/beszel/host-token.nix {
  #     name = "ha-server-1";
  #     sopsFile = ../../secrets/ha-server-1.yaml;
  #   }) ];
  #   services.beszel.agent.environment.KEY = "...";

  system.stateVersion = "26.05";
}