{
  services.soju = {
    enable = true;
    extraGroups = [ "acme" ];
    hostName = "cobalt.sefidel.com";
    listen = [
      # ":6697"
      "ircs://bouncer.sefidel.com:6697"
    ];
    tlsCertificate = "/var/lib/acme/sefidel.com/cert.pem";
    tlsCertificateKey = "/var/lib/acme/sefidel.com/key.pem";
  };

  networking.firewall.allowedTCPPorts = [ 6697 ];

  environment.persistence."/persist".directories = [
    "/var/lib/private/soju"
  ];

  # TODO: remove this once merged
  disabledModules = [ "services/networking/soju.nix" ];

  imports = [
    ./acme.nix
    ../overlays/soju.nix
  ];
}