{
  hyperhive,
  lib,
  config,
  ...
}:
let
  cfg = config.my.constellation-swarm;
in
{
  options.my.constellation-swarm = {
    enable = lib.mkEnableOption "hyperhive / constellation swarm";
    hiveName = lib.mkOption { type = lib.types.str; };
  };

  imports = [ hyperhive.nixosModules.default ];

  config.services.hyperhive = lib.mkIf cfg.enable {
    enable = true;
    swarmName = "constellation";
    ruthless = true;
    domain = "${cfg.hiveName}.darkest.space";
    hiveName = cfg.hiveName;
    matrix.enable = true;
    forge.ci.enable = true;
    gateway = {
      localHostsEntry = true;
      openFirewall = true;
    };
    swarm.peers = {
      "umbra.darkest.space" = {
        certFingerprint = "sha256:ae68d089e0155978fff7a9963bfb1e123ed645e7c9f93a4b4bb3e278c5f32a27";
      };
      "pr1ma.darkest.space" = {
        certFingerprint = "sha256:63e026f8682d6b5496f3eec99edb2ef62a8999c6d767228051e6e057f8cd90c6";
      };
    };
    otel = {
      enable = true;
      endpoint = "https://exponentials.vibec0re.mov/otel";
      headersCredential = "/etc/hyperhive/otel-cred";
    };
    c0re.adminUsers = ["muede"];
    c0re.agentMemoryMax = "6G";
  };
}