nodes['htz-hel.backup-sophie'] = {
    'hostname': 'backup.sophies-kitchen.eu',
    'bundles': {
        'backup-server',
        'zfs',
    },
    'groups': {
        'debian-bullseye',
    },
    'metadata': {
        'apt': {
            'packages': {
                'mosh': {},
                'borgbackup': {},
            },
            'unattended-upgrades': {
                # requires manual apply after reboot to unlock dm-crypt
                # devices
                'reboot_enabled': False,
            },
        },
        'backups': {
            'exclude_from_backups': True,
        },
        'interfaces': {
            'ens18': {
                'ips': {
                    '2a01:4f9:6b:2d99::c0c0:a/64',
                },
                'gateway6': '2a01:4f9:6b:2d99::2',
            },
        },
        'icinga_options': {
            'pretty_name': 'backup.sophies-kitchen.eu',
        },
        'vm': {
            'cpu': 4,
            'ram': 8,
        },
        'backup-server': {
            'zfs-base': 'tank/backups',
        },
        'nftables': {
            'rules': {
                '50-sophie-misc': [
                    'inet filter input udp dport { 60000-61000 } accept',
                    'inet filter input tcp dport 5201 accept',
                ],
            },
        },
        'zfs': {
            'datasets': {
                'tank/ejgwthink': {
                    'mountpoint': '/mnt/backups/ejgwthink',
                },
                'tank/moto-sophie': {
                    'mountpoint': '/mnt/backups/moto-sophie',
                },
                'tank/backups': {},
            },
            'pools': {
                'tank': {
                    'when_creating': {
                        'config': [{
                            'devices': {'/dev/sdb'},
                        }],
                    },
                },
            },
        },
    },
}