{ ... }: {
  den.aspects.beszel = { host, ... }: {
    den.tunnels =
      if host.name == "box"
      then [ "fleet" ]
      else [];

    nixos = { lib, ... }: {
      services.beszel.agent = {
        enable = true;

        environment = {
          KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMlX8zdofzg+vV0H6H5U54YIbTY/z0iPfD9LXupBY2jX";
          TOKEN = "30949ab5-3ed3-46c1-b606-4e4e66b847f9";
          HUB_URL = "https://fleet.bug.tools";
          SYSTEM_NAME = host.name;
        };

        environmentFile = "/var/lib/beszel-agent/environment";
      };

      services.beszel.hub = lib.mkIf (host.name == "box") {
        enable = true;
        host = "0.0.0.0";
        port = 8090;
      };
    };
  };
}