{ config, lib, pkgs, ... }:

let
  inherit (lib) mkIf;

  cfg = config.pepe.services.prowlarr;
in
{
  options.pepe.services.prowlarr = with lib; {
    enable = mkEnableOption "Enable prowlarr";
    package = mkPackageOption pkgs "prowlarr" { };
    domain = mkOption {
      type = types.str;
      default = null;
    };
  };

  config = mkIf cfg.enable {
    services.prowlarr = {
      enable = true;
      package = cfg.package;
    };

    pepe.core.vhost.hosts.${cfg.domain} = with config.pepe.core.network; {
      dnsInterfaces = [ interfaceTypes.vpn interfaceTypes.lan ];
      locations."/" = {
        port = 9696;
        allowLan = true;
        proxyWebsockets = true;
        allow = [
          interfaces.${interfaceTypes.vpn}.net
        ];
      };
    };

    pepe.core.media.groupMembers = mkIf config.pepe.core.media.enable [ "prowlarr" ];
  };
}