{ ... }:
let
  domain = "ci.sinerva.eu";
in
{
  imports = [
    ./utils/nginx-https-server.nix
    ./utils/acme-http-client.nix
  ];

  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  services = {
    hydra = {
      enable = true;
      hydraURL = "https://${domain}";
      listenHost = "localhost";
      notificationSender = "hydra@sinerva.eu";
      port = 8080;
      useSubstitutes = true;
      extraConfig = ''
        <dynamicruncommand>
          enable = 1
        </dynamicruncommand>
      '';
    };

    nginx.virtualHosts.${domain}.locations."/" = {
      proxyPass = "http://localhost:8080";
    };
  };

  nix = {
    settings.allowed-uris = [
      "github:"
      "git+https://github.com/"
      "git+ssh://github.com/"
    ];

    buildMachines = [
      {
        hostName = "localhost";
        protocol = null;
        systems = [
          "x86_64-linux"
          "aarch64-linux"
        ];
        supportedFeatures = [
          "kvm"
          "nixos-test"
          "big-parallel"
          "benchmark"
        ];
        maxJobs = 6;
      }
    ];
  };
}