# modules/containers/argus.nix
{ config, ... }:

let
  workDir = "/srv/containers/argus";
in
{
  systemd.tmpfiles.rules = [
    "d ${workDir} 2700 root admin"
  ];

  virtualisation.oci-containers.containers.argus = {
    autoStart = true;

    image = "releaseargus/argus:latest";

    ports = [
      "0.0.0.0:10009:8080"
    ];

    volumes = [
      "${workDir}:/app/data"
      "${config.age.secrets.argus-conf.path}:/app/config.yml:ro"
    ];

    environment = {
      TZ = "Europe/Bucharest";
      ARGUS_UID = "1000";
      ARGUS_GID = "10000";
    };
  };
}