{config, ...}:
with config.constants; {
  hardware.graphics.enable = true;

  services = {
    aria2 = {
      enable = true;
      rpcSecretFile = config.sops.secrets.aria2.path;
      settings = {
        check-integrity = true;
        max-concurrent-downloads = 16;
        rpc-listen-all = true;
        rpc-listen-port = port.aria2;
      };
    };
    jellyfin = {
      enable = true;
      user = userName;
    };
    jellyseerr = {
      enable = true;
      port = port.jellyseerr;
    };
    prowlarr = {
      enable = true;
      settings.server.port = port.prowlarr;
    };
    radarr = {
      enable = true;
      user = userName;
      settings.server.port = port.radarr;
    };
    sonarr = {
      enable = true;
      user = userName;
      settings.server.port = port.sonarr;
    };
  };

  sops.secrets.aria2 = {};

  users.users.${userName}.extraGroups = [config.systemd.services.aria2.serviceConfig.Group];
}