_: {
  # Shared vector store for RAG, queried from any LAN machine by the rag CLI.
  services.qdrant = {
    enable = true;
    settings.service.host = "0.0.0.0"; # default 127.0.0.1; LAN-reachable
  };

  networking.firewall.allowedTCPPorts = [ 6333 ]; # HTTP/REST API
}