{ config, pkgs, ... }:
{
  environment.systemPackages = [ pkgs.minio-client ];

  systemd.services.minio.environment = {
    MINIO_BROWSER_REDIRECT = "false";
  };

  sops.secrets.minio = {
    owner = "minio";
    group = "minio";
    mode = "0600";
    restartUnits = [ "minio.service" ];
  };
  services.minio =
    let
      dataDir = "/var/lib/slab/minio";
    in
    {
      enable = true;
      region = "us-east-1";
      consoleAddress = "0.0.0.0:9006";
      listenAddress = "0.0.0.0:9005";
      rootCredentialsFile = config.sops.secrets.minio.path;
      dataDir = [ "${dataDir}/data" ];
      configDir = "${dataDir}/config";
    };
}