{
  lib,
  config,
  inputs,
  ...
}:
let
  cfg = config.my.servers.ryot;
in
{
  options.my.servers.ryot = inputs.self.lib.mkServerOptions "ryot" "tracker" 8765 lib;
  config = lib.mkIf (cfg.enable && config.my.servers.postgres.enable && config.my.secureHost) {
    sops.secrets.ryot.sopsFile = ../../secrets/env.yaml;
    virtualisation.oci-containers.containers.ryot = {
      image = "ghcr.io/ignisda/ryot:v9.3.0";
      ports = [ "${toString cfg.port}:8000" ];
      environmentFiles = [ config.sops.secrets.ryot.path ];
      environment = {
        RUST_LOG = "ryot=debug,sea_orm=debug";
        TZ = config.my.timeZone;
        DATABASE_URL = "postgres:///ryot?host=${config.my.postgresSocket}";
        FRONTEND_INSECURE_COOKIES = "true";
      };
      volumes = [ "${config.my.postgresSocket}:${config.my.postgresSocket}" ];
    };
  };
}