{
  lib,
  config,
  ...
}: {
  config = lib.mkIf config.services.immich.enable {
    assertions = [
      {
        assertion = !config.services.immich.database.enable || config.services.postgresql.enable;
        message = "PostgreSQL must be enabled when using postgres database for Immich";
      }
      {
        assertion = !(config.services.immich.database.enable && config.services.immich.database.createDB) || (builtins.any (db: db == "immich") config.services.postgresql.ensureDatabases);
        message = "Immich built-in database creation failed - expected 'immich' in ensureDatabases but got: ${builtins.toString config.services.postgresql.ensureDatabases}";
      }
      {
        assertion = !(config.services.immich.database.enable && config.services.immich.database.createDB) || (builtins.any (user: user.name == "immich") config.services.postgresql.ensureUsers);
        message = "Immich built-in user creation failed - expected user 'immich' in ensureUsers but got: ${builtins.toString (builtins.map (u: u.name) config.services.postgresql.ensureUsers)}";
      }
    ];

    # Note: Immich has built-in database creation via services.immich.database.createDB we only add the systemd dependency

    systemd.services.immich-server = lib.mkIf config.services.immich.database.enable {
      requires = [
        config.systemd.services.postgresql.name
      ];
    };
  };
}