{ config, pkgs, modulesPath, lib, system, ... }:

{
  config = {
    sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    sops.defaultSopsFile = ../../secrets/torrents-2.yaml;
    # sops.secrets."foo" = {
    #   owner = "transmission";
    # };

    networking.hostName = "torrents-2";
    networking.firewall.allowedTCPPorts = [ 80 443 9091 ];

    hardware.graphics = {
      enable = true;
    };

    hardware.nvidia = {
      modesetting.enable = true;
      nvidiaPersistenced = true;
      powerManagement.enable = false;
      powerManagement.finegrained = false;
      open = false;
      nvidiaSettings = true;
      package = config.boot.kernelPackages.nvidiaPackages.legacy_580;
    };

    nixpkgs.config.allowUnfree = true;

    services.xserver.videoDrivers = [ "nvidia" ];

    sops.templates."transmission-rpc-password.json" = {
      content = ''
        {
          "rpc-password": "${config.sops.placeholder.foo}"
        }
      '';
      owner = "transmission";
      restartUnits = [ "transmission.service" ];
    };

    services.transmission = {
      enable = true;
      package = pkgs.transmission_4;
      credentialsFile = config.sops.templates."transmission-rpc-password.json".path;
      settings = {
        rpc-authentication-required = true;
        rpc-username = "kdam0";
        # testpass
        # rpc-password = "{b55cdbfcac290fff79d3bdb3441082dca8f278aay.bodWGn";
        # rpc-password-file = config.sops.secrets."foo".path;
        rpc-bind-address = "0.0.0.0";
        # rpc-host-whitelist = "torrents2.kumardamani.net";
        rpc-whitelist-enabled = true;
        rpc-whitelist = "127.0.0.1,10.10.*.*";
      };
    };

    fileSystems."/mnt/data" = {
      device = "nas.bacala:/mnt/tank/customers/kumar/media";
      fsType = "nfs";
    };
  };
}