{
  lib,
  config,
  inputs,
  ...
}:
let
  cfg = config.my.servers.atticd;
in
{
  options.my.servers.atticd = inputs.self.lib.mkServerOptions "atticd" "cache" 2343 lib;
  config = lib.mkIf (cfg.enable && config.my.secureHost) {
    sops.secrets."private_cache_keys/atticd".sopsFile = ../../secrets/keys.yaml;
    services.atticd = {
      inherit (cfg) enable;
      environmentFile = config.sops.secrets."private_cache_keys/atticd".path;
      settings = {
        listen = "[::]:${toString cfg.port}";
        jwt = { };
        chunking = {
          nar-size-threshold = 64 * 1024; # 64 KiB
          min-size = 16 * 1024; # 16 KiB
          avg-size = 64 * 1024; # 64 KiB
          max-size = 256 * 1024; # 256 KiB
        };
        compression = {
          type = "zstd";
          level = 8;
        };
        garbage-collection = {
          interval = "7 days";
          default-retention-period = "7 days";
        };
      };
    };
  };
}