{ pkgs, lib, config, ... }:
let inherit (config.users) groups;
    domain = "sourcephile.fr";
in
{
services.public-inbox = {
  enable = true;
  path = with pkgs; [ /*spamassassin*/ ];
  #mda.args = [ "--no-precheck" ];
  mda.spamCheck = null;
  watch.spamCheck = null;

  #config.publicinbox.css =
  #  [ "href=https://${domain}/lists/public-inbox.css" ];

  http.mounts = [ "https://${domain}/lists" ];
  wwwListing = "match=domain";

  nntpServer = [ "nntps://news.${domain}" ];
  nntp.cert = "/var/lib/acme/${domain}/fullchain.pem";
  nntp.key = "/var/lib/acme/${domain}/key.pem";
  nntp.extraGroups = [ groups.acme.name ];

  inboxes = {
    equipage = {
      address = [
        "public-inbox+equipage@${domain}"
        "equipage@${domain}"
      ];
      description = "Équipage";
      url = "https://${domain}/lists/equipage";
      newsgroup = "inbox.comp.sourcephile.equipage";
      #config.coderepo = [ "sourcephile" ];
    };
  };

  /*
  config.coderepo.sourcephile-nix = {
    dir = "/var/lib/git/repositories/sourcephile.git";
    cgitUrl = "https://${domain}/git/sourcephile";
  };
  */
};
security.acme.certs."${domain}" = {
  postRun = "systemctl reload public-inbox-nntp";
};
systemd.services.public-inbox = {
  wants = [ "acme-selfsigned-${domain}.service" "acme-${domain}.service"];
  after = [ "acme-selfsigned-${domain}.service" ];
};
}