{ pkgs, ... }:
{
  services.ollama = {
    enable = true;
    port = 11434;
    user = "nix-apps";
    group = "jallen-nas";
    openFirewall = true;
    acceleration = "cuda";
    home = "/media/nas/ssd/nix-app-data/ollama";
  };

  services.open-webui = {
    enable = true;
    host = "0.0.0.0";
    port = 8888;
    openFirewall = true;
    # stateDir = "/media/nas/ssd/nix-app-data/open-webui";
    environment = {
      OAUTH_CLIENT_ID = "P4YrtPrdwoQkwYs4e5AHQx7xiz4FV6OpT24rjqXa";
      OAUTH_CLIENT_SECRET = "XpZ1Y9RUMD6FVxBSxg8evHkRYuSUJ3saN99uCFfeNo4Z8vrmnqZBHJQzSSCFig1fgqEYCr3SmcOvCHGHUsz9FJT2aZFlZxKv6bZZpuMQYASHiQtuX2pTVEspiNab3129";
      OPENID_PROVIDER_URL = "https://authentik.mjallen.dev/application/o/chat/.well-known/openid-configuration";
      OPENID_PROVIDER_NAME = "authentik";
      ENABLE_OAUTH_SIGNUP = "true";
      OAUTH_MERGE_ACCOUNTS_BY_EMAIL = "true";
      ANONYMIZED_TELEMETRY = "False";
      DO_NOT_TRACK = "True";
      SCARF_NO_ANALYTICS = "True";
      OLLAMA_API_BASE_URL = "http://127.0.0.1:11434";
      LOCAL_FILES_ONLY = "False";
    };
  };
}