{
  lib,
  config,
  ...
}: let
  cfg = config.collinux.services.qbittorrent;
in {
  imports = [
    (import ./mkCaddyCfg.nix cfg)
  ];

  config = lib.mkIf cfg.enable {
    users.users."qbittorrent".extraGroups = ["fileserver"]; # torrent files go to /media/library

    networking.firewall.allowedTCPPorts = [49252];
    networking.firewall.allowedUDPPorts = [49252];

    services.qbittorrent = {
      enable = true;
      webuiPort = cfg.port;
      torrentingPort = 49252;
    };
  };
}