{...}: {
  networking.firewall.allowedTCPPorts = [9292];
  imports = [
    ./restic.nix
    ./traefik.nix
    ./torrent.nix
  ];
  services.radarr = {
    enable = true;
    openFirewall = true;
    dataDir = "/var/lib/radarr";
  };

  services.sonarr = {
    enable = true;
    openFirewall = true;
    dataDir = "/var/lib/sonarr";
  };

  services.prowlarr = {
    enable = true;
    openFirewall = true;
  };

  services.bazarr = {
    enable = true;
    openFirewall = true;
  };

  virtualisation.oci-containers.containers = {
    whisparr = {
      image = "hotio/whisparr:nightly-7b7bdb9";
      ports = ["6969:6969"];
      volumes = [
        "/var/lib/whisparr:/config"
        "/stash:/data/stash"
        "/media/downloads:/data/downloads"
      ];
      extraOptions = ["--network=host"];
    };

    sabnzbd = {
      image = "linuxserver/sabnzbd:nightly-version-8ef87881";
      ports = ["9292:9292"];
      environment = {
        PUID = "1000";
        PGID = "1000";
      };
      volumes = [
        "/var/lib/sabnzbd:/config"
        "/media/downloads:/media/downloads"
        "/media/incomplete-downloads:/media/incomplete-downloads"
      ];
      extraOptions = ["--network=host"];
    };
  };
}