{ config, lib, pkgs, ... }:

with lib;
let
  cfg = config.services.opentracker;
in {
  options.services.opentracker = {
    enable = mkEnableOption "opentracker";

    package = mkPackageOption pkgs "opentracker" { };

    extraOptions = mkOption {
      type = types.separatedString " ";
      description = ''
        Configuration Arguments for opentracker
        See https://erdgeist.org/arts/software/opentracker/ for all params
      '';
      default = "";
    };
  };

  config = lib.mkIf cfg.enable {

    systemd.services.opentracker = {
      description = "opentracker server";
      after = [ "network.target" ];
      wantedBy = [ "multi-user.target" ];
      restartIfChanged = true;
      serviceConfig = {
        ExecStart = "${cfg.package}/bin/opentracker ${cfg.extraOptions}";
        PrivateTmp = true;
        WorkingDirectory = "/var/empty";
        # By default opentracker drops all privileges and runs in chroot after starting up as root.
      };
    };
  };
}

