{ config, pkgs, lib, inputs, ... }:

{
  imports =[
    ./hardware-configuration.nix
    ../../common/common.nix
  ];

  # cuxhh3ei2djpgf2zdkboceuhaxavgr3ipu3d7a2swx4giy2wosfxspyd.onion

  nix.flakes.enable = true;

  bios = {
    enable = true;
    device = "/dev/vda";
  };

  luks = {
    enable = true;
    device.path = "/dev/disk/by-uuid/6dcf23ea-cb5e-4329-a88b-832209918c40";
  };

  networking.hostName = "mitty";

  networking.interfaces.ens3.useDHCP = true;

  services.nginx.enable = true;

  containers.jellyfin = {
    ephemeral = true;
    autoStart = true;
    bindMounts = {
      "/var/lib" = {
        hostPath = "/var/lib/";
        isReadOnly = false;
      };
    };
    enableTun = true;
    privateNetwork = true;
    hostAddress = "172.16.100.1";
    localAddress = "172.16.100.2";
    config = {
      imports = [
        ../../common/common.nix
        inputs.agenix.nixosModules.age
      ];
      pia.enable = true;
      nixpkgs.pkgs = pkgs;

      services.radarr.enable = true;
      services.radarr.openFirewall = true;
      services.bazarr.enable = true;
      services.bazarr.openFirewall = true;
      services.sonarr.enable = true;
      services.sonarr.openFirewall = true;
      services.jackett.enable = true;
      services.jackett.openFirewall = true;
      services.jellyfin.enable = true;
      services.jellyfin.openFirewall = true;
      services.deluge.enable = true;
      services.deluge.web.enable = true;
      services.deluge.web.openFirewall = true;
    };
  };

  services.nginx.virtualHosts."radarr.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:7878";
    };
  };
  services.nginx.virtualHosts."sonarr.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:8989";
    };
  };
  services.nginx.virtualHosts."bazarr.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:6767";
    };
  };
  services.nginx.virtualHosts."jellyfin.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:8096";
    };
  };
  services.nginx.virtualHosts."deluge.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:8112";
    };
  };
  services.nginx.virtualHosts."jackett.neet.cloud" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://172.16.100.2:9117";
    };
  };

  networking.nat.enable = true;
  networking.nat.internalInterfaces = [ "ve-jellyfin" ];
  networking.nat.externalInterface = "ens3";

  security.acme.acceptTerms = true;
  security.acme.email = "letsencrypt+5@tar.ninja";
}