nixpkgs/nixos/modules/services/misc/irkerd.nix

{
  config,
  lib,
  pkgs,
  ...
}:
let
  cfg = config.services.irkerd;
  ports = [ 6659 ];
in
{
  options.services.irkerd = {
    enable = lib.mkOption {
      description = "Whether to enable irker, an IRC notification daemon.";
      default = false;
      type = lib.types.bool;
    };

    openPorts = lib.mkOption {
      description = "Open ports in the firewall for irkerd";
      default = false;
      type = lib.types.bool;
    };

    listenAddress = lib.mkOption {
      default = "localhost";
      example = "0.0.0.0";
      type = lib.types.str;
      description = ''
        Specifies the bind address on which the irker daemon listens.
        The default is localhost.

        Irker authors strongly warn about the risks of running this on
        a publicly accessible interface, so change this with caution.
      '';
    };

    nick = lib.mkOption {
      default = "irker";
      type = lib.types.str;
      description = "Nick to use for irker";
    };
  };

  config = lib.mkIf cfg.enable {
    systemd.services.irkerd = {
      description = "Internet Relay Chat (IRC) notification daemon";
      documentation = [
        "man:irkerd(8)"
        "man:irkerhook(1)"
        "man:irk(1)"
      ];
      after = [ "network.target" ];
      wantedBy = [ "multi-user.target" ];
      serviceConfig = {
        ExecStart = "${pkgs.irker}/bin/irkerd -H ${cfg.listenAddress} -n ${cfg.nick}";
        User = "irkerd";
      };
    };

    environment.systemPackages = [ pkgs.irker ];

    users.users.irkerd = {
      description = "Irker daemon user";
      isSystemUser = true;
      group = "irkerd";
    };
    users.groups.irkerd = { };

    networking.firewall.allowedTCPPorts = lib.mkIf cfg.openPorts ports;
    networking.firewall.allowedUDPPorts = lib.mkIf cfg.openPorts ports;
  };
}