{
  config,
  factsGenerator,
  pkgs,
  ...
}:
{

  clan.core.facts.services.tinc_retiolum = factsGenerator.tinc { name = "retiolum"; };

  networking.retiolum.port = 720;
  networking.retiolum.nodename = "cherry";

  healthchecks.localCommands.ping-retiolum = pkgs.writers.writeBash "ping-retiolum" ''
    ping -c 1 -W 5 ${config.networking.retiolum.nodename}.r
  '';

  services.tinc.networks.retiolum = {
    ed25519PrivateKeyFile =
      config.clan.core.facts.services.tinc_retiolum.secret."tinc.retiolum.ed25519_key.priv".path;
    rsaPrivateKeyFile =
      config.clan.core.facts.services.tinc_retiolum.secret."tinc.retiolum.rsa_key.priv".path;
  };

  #fileSystems."/retiolum/sicily" = {
  #  device = "//sicily.r/tonne";
  #  fsType = "cifs";
  #  options = [
  #    "guest"
  #    "nofail"
  #    "noauto"
  #    "ro"
  #    "rsize=16777216"
  #    "cache=loose"
  #    "x-systemd.after=network.target"
  #  ];
  #};
}