{ config, inputs }:
let
  inherit (inputs.self.lib)
    enableList
    mkEnabled
    mkEnabledWithUsers
    ;
  wgServerIp = config.my.ips.wg-server;
  mkEnabledProxyIp = inputs.self.lib.mkEnabledProxyIp wgServerIp;
in
{
  enableProxy = true;
  enableContainers = true;
  apps.dictionaries.enable = true;
  apps.dictionaries.users = "jawz";
  services = enableList mkEnabled [
    "network"
    "wireguard"
  ];
  shell = enableList mkEnabledWithUsers [
    "multimedia"
    "tools"
  ];
  dev = enableList mkEnabledWithUsers [
    "nix"
    "sh"
  ];
  servers = {
    nextcloud = {
      enableProxy = true;
      ip = wgServerIp;
      port = 8081;
    };
  }
  // enableList mkEnabledProxyIp [
    "audiobookshelf"
    "bazarr"
    "collabora"
    "gitea"
    "homepage"
    "isso"
    "jellyfin"
    "kavita"
    "keycloak"
    "lidarr"
    "linkwarden"
    "maloja"
    "mealie"
    "metube"
    "microbin"
    "multi-scrobbler"
    "oauth2-proxy"
    "plausible"
    "plex"
    "prowlarr"
    "radarr"
    "sonarr"
    "vaultwarden"
    "yamtrack"
  ];
}