{ self, config, lib, pkgs, ... }:

with self.lib.nginx;
{
  services.hydra = {
    enable = true;
    hydraURL = "https://hydra.vapor.systems";
    notificationSender = "hydra@localhost";
    buildMachinesFiles = [ ];
    useSubstitutes = true;
    extraConfig = lib.readFile ./hydra.conf;
  };

  secrets = {
    hydraLdap = {
      source = ../../secrets/authentik/hydra;
      dest = "/var/lib/hydra/ldap-password.conf";
      owner = "hydra";
      group = "hydra";
      permissions = "0440";
    };
  };

  services.nginx = {
    enable = true;
    virtualHosts = {
      "hydra.vapor.systems" = (proxyDomain "vapor.systems" "http://127.0.0.1:3000/");
    };
  };
}