{
  pkgs,
  config,
  lib,
  ...
}:
/*
this is a wrapper module for glance that allows you to
to pass monitor entries in with nix, all declaratively!

        |           <8yy>            |
        V                            V
    # add to glance
    homelab.glance.links.mediastack = [{
      title = service;
      url = "https://${cfg.url}";
      error-url = "http://${homelab.host_ip}:${toString cfg.port}";
      check-url = "http://${homelab.host_ip}:${toString cfg.port}";
      icon = "di:${service}";
      allow-insecure = true; }];
*/
let
  service = "glance";
  cfg = config.homelab.${service};
  sec = config.sops.secrets;
  homelab = config.homelab;

  uptimekuma_url = "localhost:7901";
  uptimekuma_page = "glance";
in {
  options.homelab.${service} = {
    enable = lib.mkEnableOption "enables ${service}";

    # set port options
    port = lib.mkOption {
      type = lib.types.int;
      default = 7700;
      description = "set port for ${service} (default: ${toString cfg.port}";
    };
    url = lib.mkOption {
      type = lib.types.str;
      default = "${homelab.base_domain}";
      description = "set domain for ${service}";
    };
    data_dir = lib.mkOption {
      type = lib.types.str;
      default = "/var/lib/${service}";
      description = "set data directory for ${service}";
    };
    ids = lib.mkOption {
      type = lib.types.int;
      default = cfg.port;
      description = "set uid and pid of ${service} user (matches port by default)";
    };
    backup = lib.mkOption {
      type = lib.types.bool;
      default = true;
      description = "enable backups for ${service}";
    };
    motd = lib.mkOption {
      type = lib.types.nullOr lib.types.str;
      default = service;
    };
    links = {
      services = lib.mkOption {
        type = lib.types.listOf lib.types.attrs;
        default = [];
        description = "list of links for ${service}";
      };
      mediastack = lib.mkOption {
        type = lib.types.listOf lib.types.attrs;
        default = [];
        description = "list of links for ${service}";
      };
      system = lib.mkOption {
        type = lib.types.listOf lib.types.attrs;
        default = [];
        description = "list of links for ${service}";
      };
      network = lib.mkOption {
        type = lib.types.listOf lib.types.attrs;
        default = [];
        description = "list of links for ${service}";
      };
    };
  };

  config = lib.mkIf cfg.enable {
    # declare ${service} group
    users.groups.${service} = {
      gid = lib.mkForce cfg.ids;
    };

    # declare ${service} user
    users.users.${service} = {
      description = "${service} server user";
      uid = lib.mkForce cfg.ids;
      isSystemUser = true;
      home = cfg.data_dir;
      createHome = true;
      group = service;
      extraGroups = [];
    };

    services.${service} = {
      enable = true;
      openFirewall = true;
      settings = {
        server = {
          host = "0.0.0.0";
          port = cfg.port;
          assets-path = "${cfg.data_dir}/assets";
        };
        #        theme = {custom-css-file = "/assets/user.css";};
        auth = {
          secret-key = "+mYVAc1uO85hUUz5Ij6Lpelv1RqiLlneYqZD5Jv45buoF2+LZtIt2okRrbFCppiRQbqXkGoRMtSI0bROg4uFUw==";
          users = {
            blake = {
              password-hash = "$2a$10$RwPCkcto35DCp4vNTDpH6.G3TpecPJ/zUL1jI93uzr.lg6v233Sie";
            };
          };
        };
        branding = {
          #logo-url = "/assets/icons/${config.networking.hostName}.png";
          logo-url = "/assets/icons/snowbelle.png";
          favicon-url = "/assets/icons/favicon.ico";
        };
        pages = [
          {
            name = config.networking.hostName;
            hide-desktop-navigation = true;
            columns = [
              {
                size = "small";
                widgets = [
                  {
                    type = "calendar";
                    first-day-of-week = "monday";
                  }
                  {
                    type = "server-stats";
                    servers = [
                      {
                        type = "local";
                        name = config.networking.hostName;
                        hide-mountpoints-by-default = true;
                        mountpoints = {
                          "/" = {
                            name = "root";
                            hide = false;
                          };
                          "/holocron" = {
                            name = "holocron";
                            hide = false;
                          };
                          "/holocron/media" = {
                            name = "media";
                            hide = false;
                          };
                          "/holocron/vault" = {
                            name = "vault";
                            hide = false;
                          };
                        };
                      }
                    ];
                  }
                  {
                    type = "clock";
                    hour-format = "24h";
                    timezones = [
                      {
                        timezone = "America/Chicago";
                        label = "HTX";
                      }
                      {
                        timezone = "America/Denver";
                        label = "AF";
                      }
                    ];
                  }
                  {
                    type = "twitch-channels";
                    channels = [
                      "SaltSSBM"
                      "thewaffle77"
                      "ironmouse"
                      "linustech"
                    ];
                  }
                ];
              }
              {
                size = "full";
                widgets = [
                  {
                    type = "search";
                    autofocus = true;
                    search-engine = "https://duckduckgo.com/?q={QUERY}";
                    new-tab = true;
                    bangs = [
                      {
                        title = "youtube";
                        shortcut = "!y";
                        url = "https://www.youtube.com/results?search_query={QUERY}";
                      }
                      {
                        title = "google";
                        shortcut = "!g";
                        url = "https://www.google.com/search?q={QUERY}";
                      }
                      {
                        title = "github";
                        shortcut = "!gh";
                        url = "https://github.com/search?q={QUERY}&type=repositories";
                      }
                      {
                        title = "nixos options";
                        shortcut = "!no";
                        url = "https://search.nixos.org/options?channel=26.05&query={QUERY}";
                      }
                      {
                        title = "nixos packages";
                        shortcut = "!np";
                        url = "https://search.nixos.org/packages?channel=26.05&query={QUERY}";
                      }
                      {
                        title = "home-manager options";
                        shortcut = "!hm";
                        url = "https://home-manager-options.extranix.com/?query={QUERY}&release=release-26.05";
                      }
                    ];
                  }
                  {
                    type = "monitor";
                    cache = "1m";
                    title = "services";
                    sites = cfg.links.services;
                  }
                  {
                    type = "monitor";
                    cache = "1m";
                    title = "mediastack";
                    sites = cfg.links.mediastack;
                  }
                  {
                    type = "monitor";
                    cache = "1m";
                    title = "system";
                    sites = cfg.links.system;
                  }
                  {
                    type = "monitor";
                    cache = "1m";
                    title = "network";
                    sites = cfg.links.network;
                  }
                  {
                    type = "custom-api";
                    title = "recpro";
                    url = "https://api.mcstatus.io/v2/status/java/mc.recoil.pro";
                    cache = "5s";
                    template = "<div style=\"display:flex; align-items:center; gap:12px;\">\n  <div style=\"width:40px; height:40px; flex-shrink:0;  border-radius:4px; display:flex; justify-content:center; align-items:center; overflow:hidden;\">\n    {{ if .JSON.Bool \"online\" }}\n      <img src=\"{{ .JSON.String \"icon\" | safeURL }}\" width=\"64\" height=\"64\" style=\"object-fit:contain;\">\n    {{ else }}\n      <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 20 20\" fill=\"currentColor\" style=\"width:32px; height:32px; opacity:0.5;\">\n        <path fill-rule=\"evenodd\" d=\"M1 5.25A2.25 2.25 0 0 1 3.25 3h13.5A2.25 2.25 0 0 1 19 5.25v9.5A2.25 2.25 0 0 1 16.75 17H3.25A2.25 2.25 0 0 1 1 14.75v-9.5Zm1.5 5.81v3.69c0 .414.336.75.75.75h13.5a.75.75 0 0 0 .75-.75v-2.69l-2.22-2.219a.75.75 0 0 0-1.06 0l-1.91 1.909.47.47a.75.75 0 1 1-1.06 1.06L6.53 8.091a.75.75 0 0 0-1.06 0l-2.97 2.97ZM12 7a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z\" clip-rule=\"evenodd\" />\n      </svg>\n    {{ end }}\n  </div>\n\n  <div style=\"flex-grow:1; min-width:0;\">\n    <a class=\"size-h4 block text-truncate color-highlight\">\n      {{ .JSON.String \"host\" }}\n      {{ if .JSON.Bool \"online\" }}\n      <span\n        style=\"width: 8px; height: 8px; border-radius: 50%; background-color: var(--color-positive); display: inline-block; vertical-align: middle;\"\n        data-popover-type=\"text\"\n        data-popover-text=\"Online\"\n      ></span>\n      {{ else }}\n      <span\n        style=\"width: 8px; height: 8px; border-radius: 50%; background-color: var(--color-negative); display: inline-block; vertical-align: middle;\"\n        data-popover-type=\"text\"\n        data-popover-text=\"Offline\"\n      ></span>\n      {{ end }}\n    </a>\n\n    <ul class=\"list-horizontal-text\">\n      <li>\n        {{ if .JSON.Bool \"online\" }}\n        <span>{{ .JSON.String \"version.name_clean\" }}</span>\n        {{ else }}\n        <span>Offline</span>\n        {{ end }}\n      </li>\n      {{ if .JSON.Bool \"online\" }}\n      <li data-popover-type=\"html\">\n        <div data-popover-html>\n          {{ range .JSON.Array \"players.list\" }}{{ .String \"name_clean\" }}<br>{{ end }}\n        </div>\n        <p style=\"display:inline-flex;align-items:center;\">\n          <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"currentColor\" class=\"size-6\" style=\"height:1em;vertical-align:middle;margin-right:0.5em;\">\n            <path fill-rule=\"evenodd\" d=\"M7.5 6a4.5 4.5 0 1 1 9 0 4.5 4.5 0 0 1-9 0ZM3.751 20.105a8.25 8.25 0 0 1 16.498 0 .75.75 0 0 1-.437.695A18.683 18.683 0 0 1 12 22.5c-2.786 0-5.433-.608-7.812-1.7a.75.75 0 0 1-.437-.695Z\" clip-rule=\"evenodd\" />\n          </svg>\n          {{ .JSON.Int \"players.online\" | formatNumber }}/{{ .JSON.Int \"players.max\" | formatNumber }} players\n        </p>\n      </li>\n      {{ else }}\n      <li>\n        <p style=\"display:inline-flex;align-items:center;\">\n          <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"currentColor\" class=\"size-6\" style=\"height:1em;vertical-align:middle;margin-right:0.5em;opacity:0.5;\">\n            <path fill-rule=\"evenodd\" d=\"M7.5 6a4.5 4.5 0 1 1 9 0 4.5 4.5 0 0 1-9 0ZM3.751 20.105a8.25 8.25 0 0 1 16.498 0 .75.75 0 0 1-.437.695A18.683 18.683 0 0 1 12 22.5c-2.786 0-5.433-.608-7.812-1.7a.75.75 0 0 1-.437-.695Z\" clip-rule=\"evenodd\" />\n          </svg>\n          0 players\n        </p>\n      </li>\n      {{ end }}\n    </ul>\n  </div>\n</div>";
                  }
                  #                  {
                  #                    type = "custom-api";
                  #                    title = "linggango";
                  #                    url = "https://api.mcstatus.io/v2/status/java/raceraskedforthisenjoyyall.recoil.pro";
                  #                    cache = "5s";
                  #                    template = "<div style=\"display:flex; align-items:center; gap:12px;\">\n  <div style=\"width:40px; height:40px; flex-shrink:0;  border-radius:4px; display:flex; justify-content:center; align-items:center; overflow:hidden;\">\n    {{ if .JSON.Bool \"online\" }}\n      <img src=\"{{ .JSON.String \"icon\" | safeURL }}\" width=\"64\" height=\"64\" style=\"object-fit:contain;\">\n    {{ else }}\n      <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 20 20\" fill=\"currentColor\" style=\"width:32px; height:32px; opacity:0.5;\">\n        <path fill-rule=\"evenodd\" d=\"M1 5.25A2.25 2.25 0 0 1 3.25 3h13.5A2.25 2.25 0 0 1 19 5.25v9.5A2.25 2.25 0 0 1 16.75 17H3.25A2.25 2.25 0 0 1 1 14.75v-9.5Zm1.5 5.81v3.69c0 .414.336.75.75.75h13.5a.75.75 0 0 0 .75-.75v-2.69l-2.22-2.219a.75.75 0 0 0-1.06 0l-1.91 1.909.47.47a.75.75 0 1 1-1.06 1.06L6.53 8.091a.75.75 0 0 0-1.06 0l-2.97 2.97ZM12 7a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z\" clip-rule=\"evenodd\" />\n      </svg>\n    {{ end }}\n  </div>\n\n  <div style=\"flex-grow:1; min-width:0;\">\n    <a class=\"size-h4 block text-truncate color-highlight\">\n      {{ .JSON.String \"host\" }}\n      {{ if .JSON.Bool \"online\" }}\n      <span\n        style=\"width: 8px; height: 8px; border-radius: 50%; background-color: var(--color-positive); display: inline-block; vertical-align: middle;\"\n        data-popover-type=\"text\"\n        data-popover-text=\"Online\"\n      ></span>\n      {{ else }}\n      <span\n        style=\"width: 8px; height: 8px; border-radius: 50%; background-color: var(--color-negative); display: inline-block; vertical-align: middle;\"\n        data-popover-type=\"text\"\n        data-popover-text=\"Offline\"\n      ></span>\n      {{ end }}\n    </a>\n\n    <ul class=\"list-horizontal-text\">\n      <li>\n        {{ if .JSON.Bool \"online\" }}\n        <span>{{ .JSON.String \"version.name_clean\" }}</span>\n        {{ else }}\n        <span>Offline</span>\n        {{ end }}\n      </li>\n      {{ if .JSON.Bool \"online\" }}\n      <li data-popover-type=\"html\">\n        <div data-popover-html>\n          {{ range .JSON.Array \"players.list\" }}{{ .String \"name_clean\" }}<br>{{ end }}\n        </div>\n        <p style=\"display:inline-flex;align-items:center;\">\n          <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"currentColor\" class=\"size-6\" style=\"height:1em;vertical-align:middle;margin-right:0.5em;\">\n            <path fill-rule=\"evenodd\" d=\"M7.5 6a4.5 4.5 0 1 1 9 0 4.5 4.5 0 0 1-9 0ZM3.751 20.105a8.25 8.25 0 0 1 16.498 0 .75.75 0 0 1-.437.695A18.683 18.683 0 0 1 12 22.5c-2.786 0-5.433-.608-7.812-1.7a.75.75 0 0 1-.437-.695Z\" clip-rule=\"evenodd\" />\n          </svg>\n          {{ .JSON.Int \"players.online\" | formatNumber }}/{{ .JSON.Int \"players.max\" | formatNumber }} players\n        </p>\n      </li>\n      {{ else }}\n      <li>\n        <p style=\"display:inline-flex;align-items:center;\">\n          <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"currentColor\" class=\"size-6\" style=\"height:1em;vertical-align:middle;margin-right:0.5em;opacity:0.5;\">\n            <path fill-rule=\"evenodd\" d=\"M7.5 6a4.5 4.5 0 1 1 9 0 4.5 4.5 0 0 1-9 0ZM3.751 20.105a8.25 8.25 0 0 1 16.498 0 .75.75 0 0 1-.437.695A18.683 18.683 0 0 1 12 22.5c-2.786 0-5.433-.608-7.812-1.7a.75.75 0 0 1-.437-.695Z\" clip-rule=\"evenodd\" />\n          </svg>\n          0 players\n        </p>\n      </li>\n      {{ end }}\n    </ul>\n  </div>\n</div>";
                  #                  }
                ];
              }
              {
                size = "small";
                widgets = [
                  {
                    type = "weather";
                    location = "Pearland, Texas, United States";
                    units = "imperial";
                    hour-format = "24h";
                  }
                  {
                    type = "markets";
                    markets = [
                      {
                        symbol = "SPY";
                        name = "S&P 500";
                      }
                      {
                        symbol = "XMR-USD";
                        name = "Monero";
                      }
                      {
                        symbol = "NVDA";
                        name = "NVIDIA";
                      }
                      {
                        symbol = "AAPL";
                        name = "Apple";
                      }
                      {
                        symbol = "MSFT";
                        name = "Microsoft";
                      }
                    ];
                  }
                  {
                    type = "releases";
                    cache = "1d";
                    repositories = [
                      "glanceapp/glance"
                      "go-gitea/gitea"
                      "immich-app/immich"
                      "syncthing/syncthing"
                    ];
                  }
                ];
              }
            ];
          }
        ];
      };
    };

    # override umask to make permissions work out
    systemd.services.${service}.serviceConfig = {
      UMask = lib.mkForce "0007";
      User = service;
      Group = service;
    };

    # add to caddy for reverse proxy
    services.caddy.virtualHosts."${cfg.url}" = {
      #      serverAliases = [ "${homelab.public_domain}" ];
      extraConfig = ''
        tls internal
        reverse_proxy 127.0.0.1:${toString cfg.port}
      '';
    };

    # add to backups
    homelab.backups.baks = {
      ${service} = {
        paths = [cfg.data_dir "/var/lib/private"];
      };
    };

    # add to vaniville services to glance
    homelab.glance.links.services = [
      {
        title = "vaultwarden";
        url = "https://pass.${homelab.public_domain}";
        error-url = "https://pass.vaniville.${homelab.public_domain}";
        check-url = "https://pass.${homelab.public_domain}";
        icon = "di:vaultwarden";
      }
      {
        title = "gitea";
        url = "https://git.${homelab.public_domain}";
        error-url = "https://git.vaniville.${homelab.public_domain}";
        check-url = "https://git.${homelab.public_domain}";
        icon = "di:gitea";
      }
    ];

    homelab.glance.links.system = [
      {
        title = "vaniville uptime";
        url = "https://up.${homelab.public_domain}";
        error-url = "https://up.vaniville.${homelab.public_domain}";
        check-url = "https://up.${homelab.public_domain}";
        icon = "di:uptime-kuma";
      }
    ];

    # add to udr to glance
    homelab.glance.links.network = [
      {
        title = "shauna";
        url = "https://shauna.holocron.blue";
        error-url = "https://10.0.0.1";
        check-url = "https://10.0.0.1";
        icon = "di:unifi";
        allow-insecure = true;
      }
      {
        title = "lifeboat";
        url = "https://lifeboat.holocron.blue";
        error-url = "https://100.101.11.5";
        check-url = "https://100.101.11.5";
        icon = "di:unifi";
        allow-insecure = true;
      }
      {
        title = "korrina";
        url = "https://korrina.holocron.blue";
        error-url = "https://100.101.11.1";
        check-url = "https://100.101.11.1";
        icon = "di:unifi";
        allow-insecure = true;
      }
      {
        title = "linode";
        url = "https://cloud.linode.com/linodes";
        error-url = "https://status.linode.com";
        check-url = "https://cloud.linode.com/linodes";
        icon = "di:linode";
        allow-insecure = true;
      }
      {
        title = "tailscale";
        url = "https://console.tailscale.com/admin/machines";
        error-url = "https://status.tailscale.com/";
        check-url = "https://console.tailscale.com/admin/machines";
        icon = "di:tailscale";
        allow-insecure = true;
      }
      {
        title = "nextdns";
        url = "https://my.nextdns.io";
        error-url = "https://test.nextdns.io";
        check-url = "https://my.nextdns.io/527db2/setup";
        icon = "di:nextdns";
        allow-insecure = true;
      }
    ];
  };
}