{ config, depot, lib, ... }:
let
  orgDomain = depot.lib.meta.domain;
  host = depot.reflection;
in {
  networking.domain = lib.mkDefault "${host.enterprise.subdomain or "services"}.${orgDomain}";
  networking.search = [ config.networking.domain "search.${orgDomain}" ];
  security.pki.certificates = [ (builtins.readFile ../../data/ca.crt) ];
}