{ inputs, ... }:
{
  flake.modules.nixos.step-client = { pkgs, config, ... }: {
    imports = with inputs.self.modules.nixos; [ ssh ];
    ssh.certificates = true;
    home-manager.sharedModules = with inputs.self.modules; [
      homeManager.step-client
    ];
  };

  flake.modules.homeManager.step-client = { pkgs, ... }: {
    home.packages = with pkgs; [
      step-cli
      (writeShellScriptBin "check-ssh" ''
        set -euo pipefail
        bash <(curl -sL https://gitea.john-stream.com/john/janus/raw/branch/main/scripts/ssh-server-check.sh)
      '')
    ];
  };
}