{
  imports =
    [
      ../../../deployments/seedbox/qbittorrent/default.nix
    ];

  variables.qbittorrent = {
    user = "qbittorrent";
    group = "jellyfin";
    torrentPort = 60836;
    uiPort = 8888;
    configDir = "/var/lib/qbittorrent";
    openFilesLimit = 8192;
  };

  users.users.qbittorrent = {
    group = "jellyfin";
    isSystemUser = true;
    home = "/var/lib/qbittorrent";
  };

  services.nginx = {
    virtualHosts."ecchi.elmosco.lewd.wtf" = {
      serverName = "ecchi.elmosco.lewd.wtf";
      locations = {
        "/" = {
          extraConfig = ''
            auth_basic "Show slit";
            auth_basic_user_file /run/secrets/services/nginx/ecchi.htpasswd;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto https;
            client_max_body_size 50M;
          '';
        };
      };
    };
  };
}