{
  description = "flake to deploy and manage cccb k8s cluster";
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05";
    nixpkgs-k8s.url = "github:NixOS/nixpkgs/4acc7f1d238d2b4f5d86bc65ca9b703d802e6e02"; # kubernetes 1.33.4
    flake-utils.url = "github:numtide/flake-utils";
    agenix = {
      url = "github:ryantm/agenix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    #    k8nix = {
    #      url = "gitlab:luxzeitlos/k8nix/develop";
    #      inputs.nixpkgs.follows = "nixpkgs";
    #    };
  };
  outputs =
    inputs@{
      self,
      nixpkgs,
      nixpkgs-k8s,
      flake-utils,
      agenix,
    #      k8nix,
    }:
    {
      nixosConfigurations = (import ./nixosConfigurations.nix inputs);
    }
    // flake-utils.lib.eachDefaultSystem (
      system:
      let
        pkgs = import nixpkgs { inherit system; };
        pkgs-k8s = import nixpkgs-k8s { inherit system; };
      in
      {
        formatter = pkgs.nixfmt-tree;
        devShells.default = pkgs.mkShell {
          packages = with pkgs; [
            agenix.packages.${system}.default
            gnumake
            pkgs-k8s.kubectl
            cfssl

            # debugging
            age
            etcd
            openssl
          ];
        };
      }
    );
}