{...}: {
  imports = [
    ./proxy.nix
    ./database.nix
    ./fail2ban.nix
    ./impermanence.nix
  ];

  # NOTE: This shouldn't be needed now that we are out of testing
  # config = lib.mkIf config.services.immich.enable {
  #   networking.firewall.interfaces.${config.services.tailscale.interfaceName} = {
  #     allowedUDPPorts = [
  #       config.services.immich.port
  #     ];
  #     allowedTCPPorts = [
  #       config.services.immich.port
  #     ];
  #   };
  # };
}