{config, ...}: let
  vars = import ../../../../vars.nix;
in {
  virtualisation.arion = {
    projects.nextcloud.settings = {
      imports = [./arion-compose.nix];
    };
  };

  sops.secrets."nextcloud/mysql_root_password" = {
    owner = vars.user;
  };
  sops.secrets."nextcloud/mysql_password" = {
    owner = vars.user;
  };
  sops.secrets."nextcloud/mysql_database" = {
    owner = vars.user;
  };
  sops.secrets."nextcloud/mysql_user" = {
    owner = vars.user;
  };

  sops.templates."nextcloud.env" = {
    path = "/home/${vars.user}/.docker/nextcloud/nextcloud.env";
    owner = vars.user;
    mode = "0775";
    content = ''
      MYSQL_ROOT_PASSWORD="${config.sops.placeholder."nextcloud/mysql_root_password"}"
      MYSQL_PASSWORD="${config.sops.placeholder."nextcloud/mysql_password"}"
      MYSQL_DATABASE="${config.sops.placeholder."nextcloud/mysql_database"}"
      MYSQL_USER="${config.sops.placeholder."nextcloud/mysql_user"}"
    '';
  };
}