{ config, ... }:
{
  server = {
    enable = true;
    email = "adam@cnst.dev";
    domain = "cnix.dev";
    user = "share";
    group = "share";
    uid = 994;
    gid = 993;

    traefik = {
      enable = true;
    };
    gitea = {
      enable = true;
    };
    unbound = {
      enable = true;
    };
    homepage-dashboard = {
      enable = true;
    };
    n8n = {
      enable = true;
    };
    bazarr = {
      enable = true;
    };
    prowlarr = {
      enable = true;
    };
    lidarr = {
      enable = true;
    };
    sonarr = {
      enable = true;
    };
    radarr = {
      enable = true;
    };
    jellyseerr = {
      enable = true;
    };
    jellyfin = {
      enable = true;
      cloudflared = {
        tunnelId = "234811e2-bc86-44b2-9abd-493686e25704";
        credentialsFile = config.age.secrets.jellyfinCloudflared.path;
      };
    };
    uptime-kuma = {
      enable = true;
    };
    vaultwarden = {
      enable = true;
      url = "vault.cnst.dev";
      cloudflared = {
        tunnelId = "fdd98086-6a4c-44f2-bba0-eb86b833cce5";
        credentialsFile = config.age.secrets.vaultwardenCloudflared.path;
      };
    };
    www = {
      enable = true;
      url = "cnst.dev";
      cloudflared = {
        tunnelId = "e5076186-efb7-405a-998c-6155af7fb221";
        credentialsFile = config.age.secrets.wwwCloudflared.path;
      };
    };
    authentik = {
      enable = true;
      url = "auth.cnst.dev";
      cloudflared = {
        tunnelId = "b66f9368-db9e-4302-8b48-527cda34a635";
        credentialsFile = config.age.secrets.authentikCloudflared.path;
      };
    };
    nextcloud = {
      enable = true;
      adminpassFile = config.age.secrets.nextcloudAdminPass.path;
    };
    fail2ban = {
      enable = true;
      apiKeyFile = config.age.secrets.cloudflareFirewallApiKey.path;
      zoneId = "0027acdfb8bbe010f55b676ad8698dfb";
    };
    keepalived = {
      enable = true;
      interface = "enp6s0";
    };
    podman = {
      enable = true;
      gluetun.enable = true;
      qbittorrent = {
        enable = true;
        port = 8387;
      };
      slskd = {
        enable = true;
      };
      pihole = {
        enable = true;
        port = 8053;
      };
    };
  };
}