with builtins; {

  imports = [ ./provider.nix ./nginx.nix ./journald.nix ];

  # create default index
  resource.graylog_index_set.default =
    let
      maxIndexSize = 200;
      maxIndexCount = 20;
      isDefault = true;
    in
    {
      title = "default";
      description = ''
        This is the default index set, where everything ends up which is
        not specifically send to another index.

        Be aware this index can only hold ${
          toString (maxIndexCount * maxIndexSize)
        }MB of logs!
      '';
      default = isDefault;
      index_prefix = "graylog";
      rotation_strategy_class =
        "org.graylog2.indexer.rotation.strategies.SizeBasedRotationStrategy";
      retention_strategy_class =
        "org.graylog2.indexer.retention.strategies.DeletionRetentionStrategy";
      index_analyzer = "standard";
      index_optimization_disabled = false;
      writable = true;
      shards = 1;
      replicas = 0;
      index_optimization_max_num_segments = 1;
      field_type_refresh_interval = 5000;
      retention_strategy = toJSON ({
        max_number_of_indices = maxIndexCount;
        type =
          "org.graylog2.indexer.retention.strategies.DeletionRetentionStrategyConfig";
      });
      rotation_strategy = toJSON ({
        #max_docs_per_index = 30000000;
        max_size = maxIndexSize * 1024 * 1024;
        type =
          "org.graylog2.indexer.rotation.strategies.SizeBasedRotationStrategyConfig";
      });
    };
}