{
  lib,
  config,
  ...
}: let
  const = import ./const.nix;
  dataDirectory = const.dataDirectory;
in {
  imports = [
    ./proxy.nix
    ./fail2ban.nix
    ./impermanence.nix
  ];

  options.services.actual = {
    subdomain = lib.mkOption {
      type = lib.types.str;
      default = "actual";
      description = "subdomain of base domain that actual will be hosted at";
    };
  };

  config = lib.mkIf config.services.actual.enable {
    systemd.tmpfiles.rules = [
      "d ${dataDirectory} 2770 actual actual"
    ];

    services.actual = {
      settings = {
        ACTUAL_DATA_DIR = dataDirectory;
      };
    };
  };
}