{
  config,
  pkgs,
  ...
}:
{
  age.secrets."copyparty-jan" = {
    file = ../secrets/copyparty-jan.age;
    owner = "copyparty";
  };

  environment.systemPackages = [ pkgs.copyparty ];

  services.copyparty = {
    enable = true;

    settings = {
      # p = 3923;
      z = true;
      ed = true;
      e2dsa = true;
      e2ts = true;
      daw = true; # WebDAV
    };

    accounts = {
      jan.passwordFile = config.age.secrets.copyparty-jan.path;
    };

    groups = {
      family = [ "jan" ];
    };

    volumes = {
      "/" = {
        path = "/mnt/cloud";
        access = {
          A = [ "jan" ];
          r = "*";
        };
        # flags = { };
      };

      "/Medien" = {
        path = "/mnt/media";
        access = {
          A = [ "jan" ];
          r = "*";
        };
      };
    };
  };

  users.users.copyparty.extraGroups = [ "media" ];
}