let _presets = (import "schemas/lib/concerns_presets.ncl").presets in

{
  fleet_base | default = {
    name    | default = "fleet_base",
    version | default = "0.1.0",
    mode    | default = 'base_setup,

    fleet_key_path         | default = "UNSET",
    fleet_key_install_path | default = "/etc/fleet/age.key",

    registries | default = [],

    requires | default = {
      credentials  = [],
      capabilities = ["vm-lifecycle", "ssh-access"],
    },

    provides | default = {
      service   = "fleet_base",
      interface = "fleet-base",
    },

    operations | default = {
      install = true,
      update  = true,
      health  = true,
    },

    concerns | default = _presets.infrastructure_glue & {
      security | force = { kind = 'enabled, reason = "installs the fleet age key — prerequisite for all SOPS-aware components" },
    },
  },
}