{ config, pkgs, lib, ... }: {
  imports = [
    # other profiles
    ./server.nix
    ../common/server/samba.nix
    ../common/server/prometheus.nix
    ../common/server/grafana.nix
    ../common/server/traefik.nix
    ../common/server/transmission.nix
    ../common/server/unifi.nix
    ../common/server/gitea.nix
    ../common/server/rclone.nix
    ../common/server/navidrome.nix
  ];

  users.groups.nas.gid = 5000;
  users.users.nas = {
    uid = 5000;
    group = "nas";
    isSystemUser = true;
  };

  services.restic.backups = {
    media = {
      paths = [ "/data/fast/music" "/data/fast/photos" "/data/fast/videos" ];
      repository = "/data/slow/backups/systems";
      passwordFile = config.age.secrets.restic-repo-systems.path;
      timerConfig = { OnCalendar = "00:55"; };
      initialize = true;
      extraBackupArgs = [ "--tag media" ];
      pruneOpts = [ "--keep-daily 7" "--keep-weekly 4" "--keep-monthly 12" ];
    };
  };
}