1{lib, ...}: {
 2  den.aspects.services.yarr = {
 3    settings.host = {
 4      domain = lib.mkOption {
 5        type = lib.types.str;
 6      };
 7      address = lib.mkOption {
 8        type = lib.types.str;
 9        default = "127.0.0.1";
10      };
11      port = lib.mkOption {
12        type = lib.types.port;
13        default = 5932;
14      };
15    };
16
17    persist = {
18      directories = [
19        {
20          directory = "/var/lib/private/yarr";
21          user = "nobody";
22          group = "nogroup";
23          mode = "0700";
24        }
25      ];
26    };
27
28    reverseProxy = {host, ...}: let
29      cfg = host.settings.services.yarr;
30    in {
31      ${cfg.domain} = {
32        port = cfg.port;
33      };
34    };
35
36    nixos = {
37      host,
38      config,
39      ...
40    }: let
41      cfg = host.settings.services.yarr;
42    in {
43      services.yarr = {
44        enable = true;
45
46        inherit (cfg) address port;
47
48        authFilePath = config.vaultix.secrets.yarr-auth.path;
49      };
50
51      vaultix.secrets.yarr-auth.file = ./auth.age;
52    };
53  };
54}