{ config, ... }:

{
  services.soju = {
    enable = true;
    extraGroups = [ "acme" ];
    hostName = "cobalt.sefidel.com";
    listen = [
      ":6697"
    ];
    tlsCertificate = "${config.security.acme.certs."sefidel.com".directory}/cert.pem";
    tlsCertificateKey = "${config.security.acme.certs."sefidel.com".directory}/key.pem";
  };

  networking.firewall.allowedTCPPorts = [ 6697 ];

  environment.persistence."/persist".directories = [
    "/var/lib/private/soju"
  ];

  # TODO: remove this once merged
  disabledModules = [ "services/networking/soju.nix" ];

  imports = [
    ./acme.nix
    ../modules/soju.nix
  ];
}