{

  description = "Deployment for skynet";

  inputs = {
    # gonna start off with a fairly modern base
    nixpkgs.url = "nixpkgs/nixos-22.11";

    # utility stuff
    flake-utils.url = "github:numtide/flake-utils";
    agenix.url = "github:ryantm/agenix";

  };

  outputs = { self, nixpkgs, agenix,  ... }: {
    # https://github.com/zhaofengli/colmena
    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };
      };

      # installed for each machine
      defaults = {
        imports = [
          ./machines/_base.nix
          # for the secrets
          agenix.nixosModule
        ];
      };

      # firewall machiene
      #agentjones = import ./machines/agentjones.nix;

      /* TODO:
      vm host
        jarvis.skynet.ie
        193.1.99.73
        ports
          22, 80
          none

      DNS
        ns1.skynet.ie
        193.1.99.120
        Ports
          22, 53 (UDP)
          53 (UDP)

      Wireguard
        ash.skynet.ie Ash is a robot spy from Alien https://en.wikipedia.org/wiki/Ash_(Alien) we need someone to get us into teh network
        193.1.99.75
        Ports
          22, 51820 (UDP)
          51820 (UDP)

      Icecase
        stream.skynet.ie
        193.1.99.111
        Ports
          22, 80, 443, 8000
          80, 443, 8000

      Minecraft
        minecraft.games.skynet.ie
        193.1.99.112
        Ports
          22, 80, 443, 25564, 25565, 25575
          80, 443, 25564, 25565, 25575

      */

      #test02 = import ./machines/test02.nix;

    };
  };

}