{ pkgs, lib, config, ... }:
let cfg = config.custom.k3s;
in {
  options = {
    custom = {
      k3s.enable = lib.mkOption {
        default = false;
        type = lib.types.bool;
        description = ''
          Whether to start k3s with custom configuration.
        '';
      };
    };
  };

  config = lib.mkIf cfg.enable {
    environment.systemPackages = [ pkgs.k3s ];
    services.k3s.enable = true;
    services.k3s.role = "server";
    # Temporary fix: by default the full hostname of the server (jefke.hyp) is not included into the Subject Alternative Name of certificates of the server.
    # We can hardcode this as a CLI flag to k3s.
    services.k3s.extraFlags = "--tls-san jefke.hyp --data-dir /mnt/data/k3s";

    # TODO: use kubenix for this.
    system.activationScripts.k3s-bootstrap.text =
      let
        k3sBootstrapFile = pkgs.writeText "k3s-bootstrap" (builtins.readFile ./k3s-bootstrap.yaml);
      in
      ''
        ln -sf ${k3sBootstrapFile} /mnt/data/k3s/server/manifests/k3s-bootstrap.yaml
      '';
  };
}