{ me, machines, ... }:

{
  imports = [
    ../../modules/common.nix

    # truite is the primary (and only) ingress node
    # of the renard tunnel at `tunnel.rnrd.eu`.
    ../../modules/tunnel/ingress.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      enable = true;

      public = true;
      tailnet = false;
    };

    monitoring = {
      client.enable = true;
      services = [
        "base"
        "tailnet"
      ];
    };
  };

  system.stateVersion = "25.11";
}