{ inputs }:

let
  mkNode = name: hostname: {
    inherit hostname;
    sshUser = "deploy";
    user = "root";
    profiles.system = {
      path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos
        inputs.self.nixosConfigurations.${name};
    };
  };
in
{
  sshOpts = [ "-o" "StrictHostKeyChecking=accept-new" ];
  autoRollback = true;
  magicRollback = true;

  nodes = {
    # Order matters: the Gitea Actions workflow invokes them in this sequence.
    db-host     = mkNode "db-host"     "db-host.gebos.internal";     # TODO: real address
    app-host    = mkNode "app-host"    "app-host.gebos.internal";    # TODO: real address
    mqtt-ingest = mkNode "mqtt-ingest" "ingest.ge-bos.de";
  };
}