{
  inputs,
  config,
  ...
}: let
  flk = config.flake;
in {
  flake.modules.nixos.server = {
    pkgs,
    config,
    ...
  }: {
    nixpkgs.overlays = [inputs.nix-openclaw.overlays.default];

    sops.secrets."openclaw/telegram_token" = {
      owner = flk.meta.user.name;
    };
    sops.secrets."openclaw/env" = {
      owner = flk.meta.user.name;
    };

    environment.systemPackages = with pkgs; [
      whisper-cpp
      libqalculate
      gh
    ];
  };

  flake.modules.homeManager.server = {
    imports = [inputs.nix-openclaw.homeManagerModules.openclaw];

    programs.openclaw = {
      enable = true;
      config = {
        channels.telegram = {
          tokenFile = "/run/secrets/openclaw/telegram_token";
          allowFrom = [
            flk.meta.telegram.userId
          ];
        };

        gateway = {
          mode = "local";
        };
      };
      bundledPlugins = {
        summarize.enable = true; # Summarize web pages, PDFs, videos
        sag.enable = true; # Text-to-speech
        gogcli.enable = true;
        goplaces.enable = true; # Google Places API
      };
    };

    systemd.user.services.openclaw-gateway = {
      Service.Environment = [
        ''PATH="$PATH:/run/current-system/sw/bin/"''
      ];
    };
  };
}