{ config, pkgs, ... }:

let
  container_name = "nextcloud";
  compose-dir = "docker-compose/nextcloud";
  data-dir = "/mnt/data-storage/docker-data/nextcloud";
in

{
  config = {
    environment.etc."${compose-dir}/compose.yaml".text =
      /*
      yaml
      */
      ''
        services:
          nextcloud-aio-mastercontainer:
            image: nextcloud/all-in-one:latest
            container_name: nextcloud-aio-mastercontainer
            networks:
              nextcloud-aio:
            volumes:
              - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
              - /var/run/docker.sock:/var/run/docker.sock:ro
            environment:
              APACHE_PORT: 11000
              NEXTCLOUD_TRUSTED_DOMAINS: nextcloud.$DOMAIN_NAME nextcloud-aio.$DOMAIN_NAME
              TRUSTED_PROXIES: 172.16.1.253
              APACHE_IP_BINDING: 127.0.0.1
              NEXTCLOUD_DATADIR: ${data-dir}
              NEXTCLOUD_ENABLE_DRI_DEVICE: $NEXTCLOUD_ENABLE_DRI_DEVICE
              NEXTCLOUD_UPLOAD_LIMIT: 16G
              NEXTCLOUD_MAX_TIME: 3600
              NEXTCLOUD_MEMORY_LIMIT: 2048M
              SKIP_DOMAIN_VALIDATION: true
              NEXTCLOUD_ADDITIONAL_APKS: imagemagick
              NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick
            labels:
              - traefik.enable=true
              - traefik.http.services.nextcloud-aio.loadbalancer.server.port=8080
              - traefik.http.services.nextcloud-aio.loadbalancer.server.scheme=https
              - traefik.http.routers.nextcloud-aio-https.entrypoints=websecure
              - traefik.http.routers.nextcloud-aio-https.rule=Host(`nextcloud-aio.$DOMAIN_NAME`)
              - traefik.http.routers.nextcloud-aio-https.tls=true
              - traefik.http.routers.nextcloud-aio-https.tls.certresolver=cloudflare
            init: true
            restart: always

        networks:
          nextcloud-aio:
            external: true

        volumes:
          nextcloud_aio_mastercontainer:
            name: nextcloud_aio_mastercontainer
      '';

    systemd.services.nextcloud = {
      description = "Docker container : ${container_name}";
      after = [ "network.target" "docker.service" "docker.socket" "traefik.service" ];
      requires = [ "docker.service" ];
      wantedBy = ["multi-user.target"];
      path = [ pkgs.docker ];

      serviceConfig = {
        Type = "exec";
        # Pull the latest image before running
        ExecStartPre = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml pull";
        # Bring the service up
        ExecStart = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml up --remove-orphans";
        # Take it down gracefully
        ExecStop = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml down";

        Restart = "on-failure";
      };
    };
  };
}