{
  lib,
  config,
  ...
}:
let
  setup = import ../factories/mkserver.nix { inherit lib config; };
  cfg = config.my.servers.prowlarr;
in
{
  options.my.servers.prowlarr = setup.mkOptions "prowlarr" "indexer" 9696;
  config = lib.mkMerge [
    (lib.mkIf cfg.enable {
      users.users.prowlarr = {
        uid = 987;
        group = "piracy";
        isSystemUser = true;
      };
      services = {
        prowlarr = {
          inherit (cfg) enable;
        };
        flaresolverr = {
          inherit (cfg) enable;
        };
      };
    })
    (lib.mkIf (cfg.enableProxy && config.my.enableProxy && config.my.secureHost) {
      sops.secrets."private-ca/pem" = {
        sopsFile = ../../secrets/certs.yaml;
        owner = "nginx";
        group = "nginx";
      };
      my.servers.prowlarr.certPath = config.sops.secrets."private-ca/pem".path;
    })
  ];
}