{
  description = "Configuration NixOS du Crans";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
    flake-parts.url = "github:hercules-ci/flake-parts";

    # Formatter
    treefmt-nix = {
      url = "github:numtide/treefmt-nix";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    # Secret management
    agenix = {
      url = "github:ryantm/agenix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
  };

  outputs =
    inputs@{ self
    , nixpkgs
    , flake-parts
    , agenix
    , ...
    }:
    flake-parts.lib.mkFlake { inherit inputs; } {
      imports = [ inputs.treefmt-nix.flakeModule ];

      systems = [ "x86_64-linux" ];

      flake = with nixpkgs.lib; {
        nixosConfigurations =
          let
            baseModules = [
              ./modules
              agenix.nixosModules.default
            ];
            hosts = import ./hosts.nix;
          in
          # Physiques
          (mapAttrs
            (name: value:
              nixosSystem {
                specialArgs = inputs;
                modules = [ ./hosts/physiques/${name} ] ++ baseModules;
              }
            )
            # Filtre que c'est bien une machine Nixos
            (filterAttrs (n: v: !(attrByPath [ "is_debian" ] false v)) hosts.physiques)
          ) //
          # VMs
          (mapAttrs
            (name: value:
              nixosSystem {
                specialArgs = inputs;
                modules = [ ./hosts/vm/${name} ] ++ baseModules;
              }
            )
            # Filtre que c'est bien une machine Nixos
            (filterAttrs (n: v: !(attrByPath [ "is_debian" ] false v)) hosts.vms)
          );
      };

      perSystem =
        { config, pkgs, ... }:
        {
          devShells = {
            default = pkgs.callPackage ./devshells/default.nix { inherit (inputs) agenix; };
          };
        };
    };
}