{

  description = "my krops file";

  inputs = {
    secrets = {
      url = "git+ssh://gitea@git.ingolf-wagner.de/palo/nixos-secrets.git?ref=main";
      flake = false;
    };
    nixpkgs.url = "github:nixos/nixpkgs/nixos-22.05";
    krops = {
      url = "github:Mic92/krops";
      inputs.nixpkgs.follows = "nixpkgs";
    };
  };

  outputs = { self, nixpkgs, krops, secrets, ... }:
    let
      system = "x86_64-linux";
      pkgs = nixpkgs.legacyPackages.${system};
      writeCommand = krops.packages.${system}.writeCommand;
    in
    {
      # deployment
      apps.${system} = {
        #  nix run ".#deploy.sterni"
        deploy = pkgs.callPackage ./nixos/krops.nix {
          inherit writeCommand secrets;
          lib = krops.lib;
        };

        #  nix run ".#test.sterni"
        test = pkgs.callPackage ./nixos/krops.nix {
          inherit writeCommand secrets;
          lib = krops.lib;
          nixosRebuildCommand = "test";
        };
      };

    };
}