{

  description = "Deployment for skynet";

  inputs = {
    # gonna start off with a fairly modern base
    nixpkgs.url = "nixpkgs/nixos-22.11";

    # utility stuff
    flake-utils.url = "github:numtide/flake-utils";
    agenix.url = "github:ryantm/agenix";
    # this is the last stable hash that works for 22.11
    arion.url = "github:hercules-ci/arion";

  };

  outputs = { self, nixpkgs, agenix, arion, ... }: {
    # https://github.com/zhaofengli/colmena
    # colmena apply --on agentjones
    # colmena apply --on @dns
    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };
      };

      # installed for each machine
      defaults = {
        imports = [
          ./machines/_base.nix
          # for the secrets
          agenix.nixosModule
        ];
      };

      /* TODO:
      vm host
        jarvis.skynet.ie
        193.1.99.73
        172.20.20.2
        ports
          22, 80
          none
      */

      # firewall machiene
      agentjones = import ./machines/agentjones.nix;

      # ns1
      vendetta = import ./machines/vendetta.nix;

      # ns1
      vigil = import ./machines/vigil.nix;

      # wireguard
      #ash = import ./machines/ash.nix;

      # icecast - ULFM
      galatea = import ./machines/galatea.nix;

      # Game host
      optimus = {
        imports = [
          ./machines/optimus.nix
          # for the docker
          arion.nixosModules.arion
        ];
      };

      #kitt = import ./machines/kitt.nix;
    };
  };

}