nodes = {
    "inazuma": {
        "os": "alpine",
        # this requires that the ssh user has `permit nopass :wheel/user`
        "cmd_wrapper_outer": "doas -n sh -c {}",
        "metadata": {
            # HACK: this is needed to route host services from containerized traefik
            "container_gateway": "10.89.0.1",
            "ssh": {"port": "23022"},
            "tailscale": {"authkey": "dummy"},
            "www": {
                "doyouhavewifi": {"port": "20100"},
                "gzr-im-preview": {"port": "20101"},
                "gzr-im": {"port": "20102"},
                "lhost": {"port": "20103"},
                "gonca-me": {"port": "20107"},
                "cgit": {"port": "20108"},
            },
            "go-away": {"port": "20199"},
            "go-away-metrics": {"port": "20198"},
            "glance": {"port": "20106"},
        },
        "bundles": {
            # "teitoku",
            "firewall",
            "fail2ban",
            "glance",
            ## containers ##
            "authelia",
            "golink",
            "miniflux",
            "prometheus",
            "vaultwarden",
            # "langtool",
            "go-away",
            "cal",
            "geopulse",
            ## www ##
            "doyouhavewifi",
            "gzr-im-preview",
            "gzr-im",
            "lhost",
            "gonca-me",
            "git",
            "copyparty",
        },
    },
    "shimakaze": {
        "os": "alpine",
        "cmd_wrapper_outer": "doas -n sh -c {}",
        "metadata": {
            # HACK: this is needed to route host services from containerized traefik
            "container_gateway": "10.89.0.1",
            "ssh": {
                "port": "22",
            },
            "tailscale": {
                "authkey": "dummy",
            },
        },
        "bundles": {
            "hdidle",
            "paperless",
            "jellyfin",
            "immich",
            "nfs",
            "bitfroest",
            "calibre",
            "gonic",
            # "papra",
            # "hass",
        },
    },
    "vast": {
        "os": "debian",
        "bundles": {
            "apt",
            "vast-base",
        },
    },
    # "kiso": {
    #     "os": "macos",
    #     "bundles": {
    #         "brew",
    #         "macos-base",
    #     }
    # }
}