{
  network = { description = "Agatha's Nix Infra"; };

  "bloodletting" = { config, pkgs, lib, ... }: {
    imports = [ ../../common ../../hosts/bloodletting/configuration.nix ];

    deployment = {
      targetUser = "root";
      targetHost = "bloodletting";

      secrets = {
        "nyandroid-token" = {
          source = "../../secrets/nyandroid-token";
          destination = "/var/lib/secrets/nyandroid-token";
        };
        "rfc2136-technogothic-net" = {
          source = "../../secrets/rfc2136-technogothic-net";
          destination = "/var/lib/secrets/rfc2136-technogothic-net";
        };
      };

      healthChecks.cmd = let
        testService = name: {
          cmd = [ "systemctl" "is-active" "--quiet" name ];
          description = "Checking if ${name} is running";
        };
      in [
        (testService "bin")
        (testService "fail2ban")
        (testService "grafana")
        (testService "matterbridge")
        (testService "nginx")
        (testService "prometheus")
      ];
    };
  };
}