{
  networking.hostName = "meta01";
  networking.domain = "infra.forkos.org";

  bagel.sysadmin.enable = true;
  # netbox is proxied.
  bagel.raito.v6-proxy-awareness.enable = true;
  bagel.hardware.raito-vm = {
    enable = true;
    networking = {
      nat-lan-mac = "bc:24:11:b2:96:d8";
      wan = {
        address = "2001:bc8:38ee:100:1000::20/64";
        mac = "bc:24:11:64:cd:88";
      };
    };
  };
  bagel.services.netbox = {
    enable = true;
    domain = "netbox.forkos.org";
  };
  bagel.services.prometheus.enable = true;
  bagel.services.loki.enable = true;
  bagel.services.grafana.enable = true;
  bagel.services.grapevine.enable = true;
  bagel.services.pyroscope.enable = true;
  bagel.services.hookshot = {
    enable = true;
    admins = [
      "@k900:0upti.me"
    ];
  };

  i18n.defaultLocale = "fr_FR.UTF-8";

  system.stateVersion = "24.05";
  deployment.targetHost = "meta01.infra.forkos.org";
}