{

  system = "x86_64-linux";
  nixpkgsStable = true;

  id = 5;
  domain = "fc9f.de";

  sshPublicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH+aZ4jTRDA9Bf9i8UBdGzucahtpDZbjtyaTfR5BE9j4";
  wgPublicKey = "yP1kDJLP4YmHjDLKlOu7bwyd7wCkPHHAx4tY28b/Mms=";

  hardware = {
    cpuVendor = "intel";
    allowHibernation = false;
  };

  networking = {
    ip4IsPrivate = false;
    ip4Address = "152.89.106.158";
    ip4PrefixLength = 22;
    defaultGateway4 = "152.89.104.1";

    ip6IsPrivate = false;
    ip6Address = "2a03:4000:39:e9a::1";
    ip6PrefixLength = 64;
    defaultGateway6 = "fe80::1";

    dn42 = {
      ip6Address = "fd6b:6174:6a61::5";
      ip6PrefixLength = 128;
    };
  };

  nixosConfiguration =
    {
      machineConfig,
      ...
    }:
    {

      sops.secrets = {
        wgPrivateKey = {
          owner = "systemd-network";
          group = "systemd-network";
        };
      };

      common = {
        profiles.netcup.enable = true;
        configure = {
          primaryNetworkInterface.enable = true;
          rootDisk.swap = {
            enable = true;
            size = "2G";
          };
        };
      };

      zpha.profiles = {
        zaphyra.enable = true;
        dn42 = {
          enable = true;
          addresses = [
            "${machineConfig.networking.dn42.ip6Address}/${toString machineConfig.networking.dn42.ip6PrefixLength}"
          ];
        };
      };

    };

}