{
  lib,
  config,
  ...
}:
let
  cfg = config.my.servers.plex;
  setup = import ./setup.nix { inherit lib config; };
in
{
  options.my.servers.plex = setup.mkOptions "plex" "plex" 32400;
  config.services = {
    plex = lib.mkIf cfg.enable {
      enable = true;
      group = "piracy";
    };
    nginx = lib.mkIf cfg.enableProxy {
      virtualHosts."${cfg.host}" = {
        forceSSL = true;
        enableACME = true;
        http2 = true;
        serverAliases = [
          "plex.rotehaare.art"
        ];
        extraConfig = ''
          # Some players don't reopen a socket and playback stops totally instead of resuming after an extended pause
          send_timeout 100m;
          # Plex headers
          proxy_set_header X-Plex-Client-Identifier $http_x_plex_client_identifier;
          proxy_set_header X-Plex-Device $http_x_plex_device;
          proxy_set_header X-Plex-Device-Name $http_x_plex_device_name;
          proxy_set_header X-Plex-Platform $http_x_plex_platform;
          proxy_set_header X-Plex-Platform-Version $http_x_plex_platform_version;
          proxy_set_header X-Plex-Product $http_x_plex_product;
          proxy_set_header X-Plex-Token $http_x_plex_token;
          proxy_set_header X-Plex-Version $http_x_plex_version;
          proxy_set_header X-Plex-Nocache $http_x_plex_nocache;
          proxy_set_header X-Plex-Provides $http_x_plex_provides;
          proxy_set_header X-Plex-Device-Vendor $http_x_plex_device_vendor;
          proxy_set_header X-Plex-Model $http_x_plex_model;
          # Buffering off send to the client as soon as the data is received from Plex.
          proxy_redirect off;
          proxy_buffering off;
        '';
        locations."/" = {
          proxyPass = cfg.local;
          proxyWebsockets = true;
        };
      };
    };
  };
}