{
  config,
  lib,
  ...
}:
with lib; let
  cfg = config.nixfiles.modules.endlessh;
in {
  options.nixfiles.modules.endlessh.enable = mkEnableOption "endlessh";

  config = let
    port = 22;
  in
    mkIf cfg.enable {
      ark.directories = [
        "/var/lib/gotify-server"
        "/var/lib/private/gotify-server"
      ];

      services.endlessh = {
        enable = true;
        inherit port;
        extraOptions = ["-v" "-4"];
      };

      networking.firewall.allowedTCPPorts = [port];
    };
}