{ ... }: {
  networking.hostName = "bastion-in-training";
  networking.hostId = "c3e44236";

  imports = [
    ./bastion_base.nix
  ];

  boot.zfs.devNodes = "/dev/vda2";
  boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];

  boot.loader.grub.mirroredBoots = [
    {
      devices = [ "nodev" ];
      path = "/boot0";
    }
    {
      devices = [ "nodev" ];
      path = "/boot1";
    }
  ];

  fileSystems = {
    "/boot0" = {
      device = "/dev/vda1";
      fsType = "vfat";
      options = [ "nofail" ];
    };
    "/boot1" = {
      device = "/dev/vdb1";
      fsType = "vfat";
      options = [ "nofail" ];
    };
  };

  systemd.network.networks = {
    "30-enp1s0" = {
      matchConfig.Name = "enp1s0";
      networkConfig.Bridge = "br0";
      linkConfig.RequiredForOnline = "enslaved";
    };
  };
}