{ config, pkgs, lib, ... }:
let cfg = config.my.services.rclone;
in {
  options.my.services.rclone = with lib; {
    enable = mkEnableOption "rclone backup service";
  };

  config = lib.mkIf cfg.enable {
    age.secrets.rclone-gcs-sa.file =
      ../../../secrets/rclone/gcs_service_account.json.age;

    age.secrets.rclone-config.file = ../../../secrets/rclone/config.ini.age;

    systemd = {
      packages = [ pkgs.rclone ];
      timers.rclone-sync = {
        description = "synchronize restic repository to GCS";
        wantedBy = [ "timers.target" ];
        partOf = [ "rclone-sync.service" ];
        timerConfig = { OnCalendar = "02:00"; };
      };
      services.rclone-sync = {
        description = "synchronize restic repository to GCS";
        serviceConfig = let
          rcloneOptions =
            "--config=${config.age.secrets.rclone-config.path} --gcs-service-account-file=${config.age.secrets.rclone-gcs-sa.path} --fast-list --verbose";
        in {
          Type = "oneshot";
          ExecStart = [
            "${pkgs.rclone}/bin/rclone ${rcloneOptions} sync /data/slow/backups/systems gbackup:fcuny-backups-systems"
            "${pkgs.rclone}/bin/rclone ${rcloneOptions} sync /data/slow/backups/users gbackup:fcuny-backups-users"
          ];
        };
      };
    };
  };
}