{
  config,
  factsGenerator,
  pkgs,
  ...
}:
{
  clan.core.facts.services.tinc_retiolum = factsGenerator.tinc { name = "retiolum"; };

  networking.retiolum.port = 720;
  networking.retiolum.nodename = "chungus";

  healthchecks.localCommands.ping-retiolum = pkgs.writers.writeBash "ping-retiolum" ''
    ping -c 1 -W 5 ${config.networking.retiolum.nodename}.r
  '';

  services.tinc.networks.retiolum = {
    ed25519PrivateKeyFile =
      config.clan.core.facts.services.tinc_retiolum.secret."tinc.retiolum.ed25519_key.priv".path;
    rsaPrivateKeyFile =
      config.clan.core.facts.services.tinc_retiolum.secret."tinc.retiolum.rsa_key.priv".path;
  };
}