{
  config,
  inputs,
  ...
}: let
  inherit (builtins) readFile;
  inherit (config.networking) hostName;
  inherit (config.sops) secrets;
  inherit (inputs) mysecrets;
  pubHost = readFile "${mysecrets}/ssh/ssh_host_ed25519_dunamis.base64";
in {
  nix = {
    distributedBuilds = true;
    buildMachines = [
      {
        hostName = "dunamis.lan";
        maxJobs = 3;
        protocol = "ssh-ng";
        publicHostKey = pubHost;
        speedFactor = 2;
        sshKey = secrets."ssh-${hostName}-user".path;
        sshUser = "nix-ssh";
        supportedFeatures = ["benchmark" "big-parallel" "kvm" "nixos-test"];
        system = "x86_64-linux";
      }
    ];
  };
}