{ config, self, ... }:
let
  d = self.lib.data.services.webmentiond;
  p = toString d.port;
in
{
  virtualisation.oci-containers.containers.webmentiond = {
    image = "zerok/webmentiond:latest";
    volumes = [ "/var/lib/webmentiond:/data" ];
    environmentFiles = [ config.age.secrets.webmentiond-env.path ];
    ports = [ "${p}:${p}" ];
    cmd = [
      "--addr 0.0.0.0:${p}"
      "--public-url https://${d.extUrl}"
      "--auth-admin-emails pyrox@pyrox.dev"
    ];
  };
  config.age.secrets = {
    webmentiond-env.path = ./secrets/webmentiond-env.age;
    owner = "thehedgehog";
    group = "misc";
  };
}