{

  description = "Deployment for skynet";

  inputs = {
    # gonna start off with a fairly modern base
    nixpkgs.url = "nixpkgs/nixos-22.11";

    # utility stuff
    flake-utils.url = "github:numtide/flake-utils";
    agenix.url = "github:ryantm/agenix";
    arion.url = "github:hercules-ci/arion";

    # email
    simple-nixos-mailserver.url = "gitlab:mweinelt/nixos-mailserver/ldap-support";
  };

  outputs = { self, nixpkgs, agenix, arion, simple-nixos-mailserver,  ... }: {
    # https://github.com/zhaofengli/colmena
    # colmena apply --on agentjones
    # colmena apply --on @dns
    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };
      };

      # installed for each machine
      defaults = {
        imports = [
          ./machines/_base.nix
          # for the secrets
          agenix.nixosModule
        ];
      };

      # firewall machiene
      agentjones = import ./machines/agentjones.nix;

      # ns1
      vendetta = import ./machines/vendetta.nix;

      # ns1
      vigil = import ./machines/vigil.nix;

      # icecast - ULFM
      galatea = import ./machines/galatea.nix;

      # Game host
      optimus.imports = [./machines/optimus.nix arion.nixosModules.arion];

      # LDAP host
      kitt.imports = [./machines/kitt.nix arion.nixosModules.arion];

      # Gitlab
      glados = import ./machines/glados.nix;

      # email
      gir.imports = [ ./machines/gir.nix simple-nixos-mailserver.nixosModule];

    };
  };

}