{
  hlConfig,
  ...
}:
rec {
  hostname = "bastion";
  managed = false;
  ip = "192.168.10.189";

  traefikRoutes = [
    # NOTE: Disabled for now, since there is no auth yet
    # {
    #   name = "${hostname}-vpn";
    #   rule = "Host(`vpn.${hlConfig.domain}`)";
    #   target = "http://${ip}:80";
    # }
  ];
}