{ config, lib, ... }:

let
  inherit (lib) mkOption mkEnableOption;
  inherit (lib.types) types;

in
{
  options.fediversity.peertube = {
    enable = mkEnableOption "Enable a PeerTube server on the machine";

    s3AccessKey = mkOption {
      type = types.str;
      description = ''
        S3 access key

        In AWS CLI, this would be AWS_ACCESS_KEY_ID.
      '';
    };

    s3SecretKey = mkOption {
      description = ''
        S3 secret key

        In AWS CLI, this would be AWS_SECRET_ACCESS_KEY.
      '';
    };

    domain = mkOption {
      type = types.str;
      description = "Internal option — change at your own risk";
      default = "peertube.${config.fediversity.domain}";
    };

    secretsFile = mkOption {
      type = types.path;
      description = ''
        Internal option — change at your own risk

        FIXME: should it be provided by NixOps4?
        or maybe we should just ask for a main secret from which to derive all the others?
      '';
    };
  };
}