{ hostRegistry, config, pkgs, ... }:
{
  microvm = {
    mem = 2048;
    vcpu = 8;
  };
  c3d2 = {
    deployment.server = "server10";
    hq.statistics.enable = true;
  };

  # deployment = {
  #   mem = 4096;
  #   vcpu = 16;
  #   needForSpeed = true;
  # };

  system.stateVersion = "22.05";

  networking.hostName = "sdrweb";

  services = {
    backup = {
      enable = true;
      paths = [ "/var/lib/private/openwebrx/" ];
    };

    collectd.plugins = {
      curl_json = ''
        <URL "http://localhost:8073/metrics.json">
          Plugin "openwebrx_decodes"
          <Key "wsjt/decodes/*/*/count">
            Type "counter"
          </Key>
          <Key "aprs/decodes/*/*/*/count">
            Type "counter"
          </Key>
          <Key "js8call/decodes/*/*/count">
            Type "counter"
          </Key>
          <Key "decoding/queue/*/count">
            Type "counter"
          </Key>
          <Key "decoding/queue/length">
            Type "gauge"
          </Key>
          <Key "pskreporter/*/count">
            Type "gauge"
          </Key>
          <Key "wsprnet/*/count">
            Type "gauge"
          </Key>
          <Key "openwebrx/users">
            Type "gauge"
          </Key>
        </URL>
      '';
    };

    heliwatch = {
      enable = true;
      jid = "astrobot@jabber.c3d2.de";
      passwordFile = config.sops.secrets."heliwatch/passwordFile".path;
      muc = "luftraum@chat.c3d2.de/Hubschraubereinsatz";
    };

    nginx = {
      enable = true;
      virtualHosts."sdr.hq.c3d2.de" = {
        default = true;
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = "http://localhost:8073";
          proxyWebsockets = true;
        };
      };
      virtualHosts."adsb.hq.c3d2.de" = {
        forceSSL = true;
        enableACME = true;
        root = pkgs.runCommand "adsb-map" { } ''
          mkdir $out
          cp ${./adsb.html} $out/index.html
          cp ${./jquery-3.7.0.min.js} $out/jquery-3.7.0.min.js
          cp ${./airplane.svg} $out/airplane.svg
        '';
        extraConfig = ''
          index index.html;
          charset utf-8;
        '';
        locations."/data.json".proxyPass = "http://${hostRegistry.radiobert.ip4}:8080/data.json";
      };
    };

    openwebrx.enable = true;
  };

  sops = {
    defaultSopsFile = ./secrets.yaml;
    secrets."heliwatch/passwordFile".owner = "heliwatch";
  };
}