{
  lib,
  config,
  ...
}: let
  stateDir = "/var/lib/forgejo";
in {
  config = lib.mkIf (config.services.forgejo.enable && config.host.impermanence.enable) {
    assertions = [
      {
        assertion = config.services.forgejo.stateDir == stateDir;
        message = "forgejo state directory does not match persistence";
      }
    ];

    environment.persistence."/persist/system/root" = {
      enable = true;
      hideMounts = true;
      directories = [
        {
          directory = stateDir;
          user = "forgejo";
          group = "forgejo";
        }
      ];
    };
  };
}