{
  config,
  lib,
  namespace,
  ...
}:
let
  name = "glance";
  cfg = config.${namespace}.services.${name};
  net = lib.${namespace}.network;

  glanceConfig = lib.${namespace}.mkModule {
    inherit config name;
    description = "glance";
    options = {
      nasPoolPath = lib.mkOption {
        type = lib.types.str;
        default = cfg.dataDir;
        description = "Path to the NAS pool mount to display in server-stats.";
      };
    };
    moduleConfig = {
      services.glance = {
        enable = true;
        openFirewall = true;
        environmentFile = config.sops.templates."glance.env".path;
        settings = {
          server = {
            host = "0.0.0.0";
            port = cfg.port;
          };
          pages = [
            {
              name = "Startpage";
              width = "default";
              # tab = "First";
              hide-desktop-navigation = true;
              center-vertically = true;
              columns = [
                {
                  size = "small";
                  widgets = [
                    {
                      type = "calendar";
                      first-day-of-week = "sunday";
                    }
                    {
                      type = "weather";
                      units = "imperial";
                      hour-format = "12h";
                      location = "Saint Paul, Minnesota, United States";
                    }
                    {
                      type = "server-stats";
                      servers = [
                        {
                          type = "local";
                          name = "Jallen-NAS";
                          cpu-temp-sensor = "/sys/devices/pci0000:00/0000:00:08.1/0000:cd:00.0/hwmon/hwmon*/temp1_input"; # Tctl
                          mountpoints = {
                            "/home" = {
                              name = "Home";
                            };
                            "${cfg.nasPoolPath}" = {
                              name = "nas_pool";
                            };
                          };
                        }
                      ];
                    }
                  ];
                }
                {
                  size = "full";
                  # tab = "First";
                  widgets = [
                    {
                      type = "search";
                      autofocus = true;
                      search-engine = "google";
                      bangs = [
                        {
                          title = "YouTube";
                          shortcut = "!yt";
                          url = "https://www.youtube.com/results?search_query={QUERY}";
                        }
                      ];
                    }
                    {
                      type = "monitor";
                      cache = "1m";
                      title = "Services";
                      sites = [
                        {
                          title = "Actual";
                          url = "https://actual.mjallen.dev/";
                          icon = "si:actualbudget";
                        }
                        {
                          title = "Jellyfin";
                          url = "https://jellyfin.mjallen.dev/";
                          icon = "si:jellyfin";
                        }
                        {
                          title = "Gitea";
                          url = "https://gitea.mjallen.dev/";
                          icon = "si:gitea";
                        }
                        {
                          title = "Nextcloud";
                          url = "https://cloud.mjallen.dev/";
                          icon = "si:nextcloud";
                        }
                        {
                          title = "Immich";
                          url = "https://immich.mjallen.dev/";
                          icon = "si:immich";
                        }
                        {
                          title = "AdGuard Home";
                          url = "http://${net.hosts.pi5.lan}:${toString net.ports.pi5.adguard}/";
                          icon = "si:adguard";
                          allow-insecure = true;
                        }
                        {
                          title = "Home Assistant";
                          url = "https://hass.mjallen.dev/";
                          icon = "si:homeassistant";
                        }
                        {
                          title = "Manyfold";
                          url = "http://${net.hosts.nas.lan}:${toString net.ports.nas.manyfold}/collections";
                          icon = "sh:manyfold";
                          allow-insecure = true;
                        }
                        {
                          title = "Code Server";
                          url = "http://${net.hosts.nas.lan}:${toString net.ports.nas.codeServer}/";
                          icon = "si:vscodium";
                          allow-insecure = true;
                        }
                        {
                          title = "NAS KVM";
                          url = "http://nas-kvm.local/";
                          icon = "si:nanokvm";
                          allow-insecure = true;
                        }
                        {
                          title = "Sonarr";
                          url = "http://${net.hosts.nas.lan}:${toString net.ports.nas.sonarr}/";
                          icon = "si:sonarr";
                          allow-insecure = true;
                          basic-auth = {
                            username = "\${ARR_USER}";
                            password = "\${ARR_PASS}";
                          };
                        }
                        {
                          title = "Radarr";
                          url = "http://${net.hosts.nas.lan}:${toString net.ports.nas.radarr}/";
                          icon = "si:radarr";
                          allow-insecure = true;
                          basic-auth = {
                            username = "\${ARR_USER}";
                            password = "\${ARR_PASS}";
                          };
                        }
                        {
                          title = "Sabnzbd";
                          url = "http://${net.hosts.nas.lan}:${toString net.ports.nas.sabnzbd}/";
                          icon = "si:sabnzbd";
                          allow-insecure = true;
                          basic-auth = {
                            username = "\${ARR_USER}";
                            password = "\${ARR_PASS}";
                          };
                        }
                        # {
                        #   title = "";
                        #   url = "";
                        #   icon = "si:";
                        # }
                      ];
                    }
                    {
                      type = "bookmarks";
                      # tab = "First";
                      groups = [
                        {
                          title = "General";
                          links = [
                            {
                              title = "Gmail";
                              url = "https://mail.google.com/mail/u/0/";
                            }
                            {
                              title = "Proton Mail";
                              url = "https://mail.proton.me/u/0/inbox";
                            }
                            {
                              title = "MyNixOS";
                              url = "https://www.mynixos.com/";
                            }
                            {
                              title = "Github";
                              url = "https://github.com/";
                            }
                          ];
                        }
                        {
                          title = "Entertainment";
                          links = [
                            {
                              title = "YouTube";
                              url = "https://www.youtube.com/";
                            }
                            {
                              title = "Prime Video";
                              url = "https://www.primevideo.com/";
                            }
                            {
                              title = "Disney+";
                              url = "https://www.disneyplus.com/";
                            }
                          ];
                        }
                        {
                          title = "Social";
                          links = [
                            {
                              title = "Reddit";
                              url = "https://www.reddit.com/";
                            }
                            {
                              title = "Twitter";
                              url = "https://twitter.com/";
                            }
                            {
                              title = "Instagram";
                              url = "https://www.instagram.com/";
                            }
                          ];
                        }
                      ];
                    }
                    {
                      type = "reddit";
                      subreddit = "hockey";
                    }
                    {
                      type = "reddit";
                      subreddit = "formula1";
                    }
                  ];
                }
              ];
            }
            # {
            #   name = "test";
            #   width = "default";
            #   hide-desktop-navigation = true;
            #   center-vertically = true;
            #   columns = [
            #     {
            #       size = "small";
            #       widgets = [
            #         {
            #           type = "adguard";
            #           url = "http://pi4.local:3000";
            #           username = "mjallen";
            #           password = "BogieDudie1";
            #         }
            #       ];
            #     }
            #   ];
            # }
          ];
        };
      };
    };
  };
in
{
  imports = [
    glanceConfig

    # Sops env-file for arr credentials (gated behind glance.enable)
    {
      config = lib.mkIf cfg.enable (
        lib.${namespace}.mkSopsEnvFile {
          name = "glance.env";
          restartUnit = "glance.service";
          secrets = {
            "jallen-nas/glance/arr-username" = { };
            "jallen-nas/glance/arr-password" = { };
          };
          content = ''
            ARR_USER=${config.sops.placeholder."jallen-nas/glance/arr-username"}
            ARR_PASS=${config.sops.placeholder."jallen-nas/glance/arr-password"}
          '';
        }
      );
    }
  ];
}