{
  lib,
  config,
  ...
}:
let
  setup = import ../factories/mkserver.nix { inherit lib config; };
  cfg = config.my.servers.prowlarr;
in
{
  options.my.servers.prowlarr = setup.mkOptions "prowlarr" "indexer" 9696;
  config = lib.mkIf cfg.enable {
    sops.secrets = lib.mkIf cfg.enable {
      "private-ca/pem" = {
        sopsFile = ../../secrets/certs.yaml;
        owner = "nginx";
        group = "nginx";
      };
    };
    my.servers.prowlarr.certPath = config.sops.secrets."private-ca/pem".path;
    users.users.prowlarr = {
      uid = 987;
      group = "piracy";
      isSystemUser = true;
    };
    services = {
      prowlarr = {
        inherit (cfg) enable;
      };
      flaresolverr = {
        inherit (cfg) enable;
      };
    };
  };
}