{
  config,
  name,
  ...
}: {
  sops.secrets."restic/default-password" = {};

  homelab = {
    enable = true;
    hostname = name;
    tags = [name];

    monitoring.enable = true;
    motd.enable = true;

    backups = {
      enable = true;
      backends = {
        restic = {
          enable = true;
          repository = "/srv/restic-repo";
          passwordFile = config.sops.secrets."restic/default-password".path;
        };
      };
      jobs = [
        {
          name = "sandbox-home";
          backend = "restic";
          backendOptions = {
            paths = ["/home/plasmagoat"];
            repository = "/srv/restic-repo";
            pruneOpts = [
              "--keep-daily 7"
              "--keep-weekly 4"
              "--keep-monthly 6"
              "--keep-yearly 3"
            ];
          };
        }
      ];
    };

    services.prometheus = {
      enable = true;
    };

    services.gatus = {
      enable = true;
      ui = {
        title = "Homelab Status Dashboard";
        header = "My Homelab Services";
      };
    };
  };

  system.stateVersion = "25.05";
}