{ self, inputs, ... }: {
  flake.nixosModules = {
    server.imports = [
      inputs.srvos.nixosModules.server
      inputs.srvos.nixosModules.mixins-telegraf
      # FIXME: switch to VPN later
      { networking.firewall.allowedTCPPorts = [ 9273 ]; }

      inputs.clan-core.nixosModules.clanCore
      {
        # TODO: use buildClan
        clanCore.clanDir = "${./..}";
        clanCore.machineName = "web01";
      }
    ];

    hcloud.imports = [
      inputs.srvos.nixosModules.hardware-hetzner-cloud
      ./single-disk.nix
    ];

    hetzner-ex101.imports = [
      inputs.srvos.nixosModules.hardware-hetzner-online-intel
      ./xfs-lvm-crypto-raid.nix
      ./hetzner-ex101.nix
      ./initrd-networking.nix
    ];

    web01.imports = [
      self.nixosModules.server
      inputs.srvos.nixosModules.mixins-nginx
      ./web01
    ];
  };
}