{
  config,
  lib,
  pkgs,
  ...
}:
{
  networking.hostName = "gerrit01";
  # TODO: make it the default
  networking.domain = "infra.forkos.org";

  time.timeZone = "Europe/Paris";

  bagel.sysadmin.enable = true;
  # Gerrit is proxied.
  bagel.raito.v6-proxy-awareness.enable = true;
  bagel.hardware.raito-vm = {
    enable = true;
    networking = {
      nat-lan-mac = "bc:24:11:f7:29:6c";
      wan = {
        address = "2001:bc8:38ee:100:1000::10/64";
        mac = "bc:24:11:4a:9d:32";
      };
    };
  };

  fileSystems."/gerrit-data" = {
    device = "/dev/disk/by-uuid/d1062305-0dea-4740-9a27-b6b1691862a4";
    fsType = "ext4";
  };

  bagel.services.gerrit = {
    enable = true;
    domains = [
      "cl.forkos.org"
    ];
    canonicalDomain = "cl.forkos.org";
    data = "/gerrit-data";
  };

  i18n.defaultLocale = "fr_FR.UTF-8";

  system.stateVersion = "24.05";
  deployment.targetHost = "gerrit01.infra.forkos.org";
}