{
  description = "flake to deploy and manage cccb k8s cluster";
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
    nixpkgs-k8s.url = "github:NixOS/nixpkgs/771c08bfa8c7da5ab251a1d0d56fb01948f45473"; # kubernetes 1.34.3
    flake-utils.url = "github:numtide/flake-utils";
    agenix = {
      url = "github:ryantm/agenix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    # k8nix = {
    #   url = "gitlab:luxzeitlos/k8nix/develop";
    #   inputs.nixpkgs.follows = "nixpkgs";
    # };
  };
  outputs =
    inputs@{
      self,
      nixpkgs,
      nixpkgs-k8s,
      flake-utils,
      agenix,
    # k8nix,
    }:
    {
      nixosConfigurations = (import ./nixosConfigurations.nix inputs);
    }
    // flake-utils.lib.eachDefaultSystem (
      system:
      let
        pkgs = import nixpkgs { inherit system; };
        pkgs-k8s = import nixpkgs-k8s { inherit system; };
      in
      {
        formatter = pkgs.nixfmt-tree;
        devShells.default = pkgs.mkShell {
          packages = with pkgs; [
            agenix.packages.${system}.default
            gnumake
            pkgs-k8s.kubectl
            cfssl

            # debugging
            age
            etcd_3_6
            openssl
          ];
        };
      }
    );
}