{ pkgs, ... }:

# TODO: bring in cgit text configuration in `/srv` into nixos repository.
let
  inherit (pkgs) dockerTools;
  cgit = pkgs.cgit-pink;

  cgitLocalPort = "3792";
  cgitDir = "/srv/cgit";
  gitDir = "/srv/git";

  baseImage = dockerTools.pullImage {
    imageName = "alpine";
    imageDigest = "sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d";
    sha256 = "0fzqhqvvb0pzkwvjwyqjfv3rw2w8006xz4mhk0dk5clmyb08hqwc";
    finalImageName = "alpine";
    finalImageTag = "3.20.3";
  };

  # TODO: replace `buildLayeredImage` with `streamLayeredImage`
  # in the upcoming 24.11 release.
  cgitImage = dockerTools.buildLayeredImage {
    name = "cgit";
    tag = cgit.version;
    fromImage = baseImage;

    contents = with pkgs; [
      lighttpd zstd
      python311 python311Packages.pygments
    ] ++ [ cgit ];
  };

in
{
  virtualisation.oci-containers.containers = {
    cgit = {
      # TODO: see above. replace with `imageStream`.
      imageFile = cgitImage;
      image = "cgit:${cgit.version}"; # has to match `imageFile`.
      ports = [ "127.0.0.1:${cgitLocalPort}:80"];

      volumes = [
        "${cgitDir}/config/cgitrc:/etc/cgitrc"
        "${cgitDir}/config/lighttpd.conf:/etc/lighttpd/cgit.conf"
        "${cgitDir}/data:/data"
        
        "${gitDir}:/var/www/cgit"
      ];

      entrypoint = "${pkgs.lighttpd}/bin/lighttpd";
      cmd = [
        "-D" # run in foreground
        "-f" "/etc/lighttpd/cgit.conf"
      ];
    };
  };
}