{ config, factsGenerator, ... }:
{

  healthchecks.closed.retiolum.ports.s3 = [
    9000
    9001
  ];
  healthchecks.http.s3 = {
    url = "http://s3.chungus.bear";
    expectedContents = "minio";
  };

  clan.core.facts.services.s3 = factsGenerator.password {
    name = "root";
    service = "s3";
  };

  services.minio = {
    enable = true;
    region = "home";
    rootCredentialsFile = config.clan.core.facts.services.s3.secret."s3.root".path;
  };

  services.nginx = {
    enable = true;
    virtualHosts."s3.${config.networking.hostName}.private" = {
      locations."/" = {
        recommendedProxySettings = true;
        proxyWebsockets = true;
        proxyPass = "http://localhost:9000";
      };
    };
    virtualHosts."minio.${config.networking.hostName}.private" = {
      locations."/" = {
        recommendedProxySettings = true;
        proxyWebsockets = true;
        proxyPass = "http://localhost:9001";
      };
    };
  };
}