{ lib,... }:
let

in with lib; {
    domain = mkOption { type = types.str; };
    mail = {
      domain = mkOption { type = types.nullOr types.str; default = null;};
      server = mkOption { type = types.nullOr types.str; default = null;};

    };

    path = mkOption {
      type = types.submodule {
        freeformType = types.attrsOf types.str;
        options = {
          config = mkOption { type = types.str; default = "/media/config"; };
          data = mkOption { type = types.str; default = "/media/data"; };
          download = mkOption { type = types.str; default = "/media/data/download"; };
          cloud = mkOption { type = types.str; default ="/media/media/cloud"; };
          film = mkOption { type = types.str; default ="/media/media/film"; };
          book = mkOption { type = types.str; default ="/media/media/book"; };
          manga = mkOption { type = types.str; default ="/media/media/manga"; };
          photo = mkOption { type = types.str; default ="/media/media/photo"; };
          # music = mkOption { type = types.str; default ="/media/media/music"; };

          dlComplete = mkOption { type = types.str; default ="/media/download/complete"; };
          dlIncomplete = mkOption { type = types.str; default ="/media/download/incomplete"; };
          dlConverted = mkOption { type = types.str; default ="/media/download/converted"; };
        };
      };
      default = {};
    };

    colorScheme = mkOption {
      type = types.attrs;
      default = (lib.evalModules { modules =[ { freeformType = with lib.types; attrsOf anything; } ../colors ];}).config.colorScheme ;
    };
    loadedContainers = lib.mkOption {
      readOnly = true;
       type = lib.types.attrsOf (lib.types.submodule ({ name, ... }: {
        options = {
          name = lib.mkOption {type = lib.types.str; default = name;};
          requires = {
            secrets = lib.mkOption {
              type = lib.types.listOf lib.types.str;
              default = [ ];
            };
            databases = lib.mkOption {
              type = lib.types.listOf lib.types.str;
              default = [ ];
            };
          };

          exports = {
            authentik = {
              blueprints = lib.mkOption {
                type = lib.types.listOf lib.types.str;
                default = [ ];
              };
            };
          };

          runtime = {
            paths = lib.mkOption {type = lib.types.listOf lib.types.attrs; default = [ ];};
            containers = lib.mkOption {type = lib.types.attrsOf lib.types.attrs; default = { };};
            vm = lib.mkOption {type = lib.types.nullOr lib.types.attrs; default = null;};
            cron = lib.mkOption {type = lib.types.listOf lib.types.str; default = [ ];};
            setup = lib.mkOption {
              type = lib.types.submodule {
                options = {
                  trigger = lib.mkOption {type = lib.types.str; default = "";};
                  script = lib.mkOption {type = lib.types.nullOr lib.types.package; default = null;};
                  envFile = lib.mkOption {
                    type = with lib.types; coercedTo str (x: [x]) (listOf str);
                    default = [ ];
                  };
                };
              };
              default = { };
            };
          };
        };
       }));
        
    };
    containers  = mkOption {
      type = types.attrsOf (types.submodule {
        options = {
          subdomain = mkOption { type = types.nullOr types.str; default=null;};
          subpath = mkOption { type = types.nullOr types.str; default=null;};
          port = mkOption { type = types.nullOr types.port; default = null; };
          extra = mkOption { type = types.attrs; default = {}; };
        };
      });
      default = {};
    };
    openssh = mkOption {
      type = types.bool;
      default = false;
    };
    wireguard = mkOption {
      type = types.bool;
      default = false;
    };
    web = mkOption {
      type = types.bool;
      default = false;
    };
    ipfw = {
      enable = mkOption {
        type = types.bool;
        default = false;
      };
      ifs = mkOption {
        type = types.listOf types.str;
        default = [ ];
      };
      ports = mkOption {
        type = types.listOf (types.listOf (types.oneOf [ types.str types.int ]));
        default = [];
        description = "Forwarding rules: [ [srcInterface dstAddr srcPort dstPort] ... ]";
        example = [
          [ "ens3" "10.10.1.2" "IPV6" 22 2222 ]
          [ "ens3" "10.10.1.2" "IPV6" 80 80 ]
          [ "ens3" "10.10.1.2" "IPV6" 443 443 ]
        ];
      };
    };

    db = mkOption {
      type = types.listOf (types.str);
      default = [ ];
    };

}