{ config, ... }:
let
  inherit (import ../lib.nix config) havenisms;
in
{
  sops.secrets = {
    "tandoor/secret_key" = {
      restartUnits = [ "${config.local.container-backend}-tandoor.service" ];
    };
  };

  sops.templates."tandoor.env".content = ''
    SECRET_KEY="${config.sops.placeholder."tandoor/secret_key"}"
    DB_ENGINE=django.db.backends.sqlite3
  '';

  virtualisation.web-containers.containers.tandoor = {
    image = "vabene1111/recipes";
    hostname = "recipes";
    domain = havenisms;
    port = 80;
    volumes = [
      "/tank/tandoor-recipes/mediafiles:/opt/recipes/mediafiles"
      "/tank/tandoor-recipes/staticfiles:/opt/recipes/staticfiles"
    ];
    environmentFiles = [
      config.sops.templates."tandoor.env".path
    ];
  };
}