{ pkgs, inputs, ... }: {

  imports = [
    inputs.buildbot-nix.nixosModules.buildbot-master
  ];

  containers.buildbot = {
    privateNetwork = false;
    autoStart = true;

    config = { config, lib, ... }: {
      nixpkgs.pkgs = pkgs;
      imports = [
        ../../components/monitor/container.nix
        inputs.buildbot-nix.nixosModules.buildbot-master
      ];
      system.stateVersion = "24.05";
      services.logrotate.checkConfig = false; # because uid 3000 does not exist in here

      services.postgresql = {
        settings.port = 5433;
      };

      services.buildbot-nix.master = {
        enable = true;
        dbUrl = "postgresql://@:5433/buildbot";
        # Domain name under which the buildbot frontend is reachable
        domain = "orbi.private:8010";
        admins = [ "palo" ];
        workersFile = pkgs.writeText "workers.json" ''
          [
            { "name": "test", "pass": "password", "cores": 2 }
          ]
        '';

        # How to authenticate against buildbot
        authBackend = "none";

        # How to authenticate against gitea
        gitea = {
          enable = true;
          instanceUrl = "https://git.ingolf-wagner.de";
          webhookSecretFile = pkgs.writeText "gitea-webhook-secret" "my-secret";
          tokenFile = pkgs.writeText "gitea-token" "my-token";
          topic = "buildbot";
        };

      };

    };
  };

}