{ lib, config, ... }:
let
  inherit (lib) mkEnableOption mkIf types mkOption tf;
  cfg = config.bagel.hydra;
in
{
  options.bagel.hydra = {
    enable = mkEnableOption "the Hydra jobsets";
  };

  config = mkIf cfg.enable {
    terraform.required_providers.hydra = {
      version = "~> 0.1";
      source = "DeterminateSystems/hydra";
    };

    resource.secret_resource.hydra_password.lifecycle.prevent_destroy = true;

    provider.hydra = {
      host = "https://hydra.forkos.org";
      username = "terraform";
      password = tf.ref "resource.secret_resource.hydra_password.value";
    };

    resource.hydra_project.forkos = {
      name = "forkos";
      display_name = "ForkOS";
      description = "ForkOS packages collection";
      homepage = "https://cl.forkos.org";
      owner = "terraform";
      enabled = true;
      visible = true;
    };

    resource.hydra_jobset.raito-nixos-rolling-small = {
      project = config.resource.hydra_project.forkos.name;
      state = "enabled";
      visible = true;
      name = "raito-nixos-rolling-small";
      type = "legacy";
      description = "master branch for raito-nixos";

      nix_expression = {
        file = "pkgs/top-level/release.nix";
        input = "nixpkgs";
      };

      check_interval = 0;
      scheduling_shares = 3000;
      keep_evaluations = 3;

      email_notifications = false;

      input = [
        {
          name = "nixpkgs";
          type = "git";
          value = "https://cl.forkos.org/nixpkgs";
          notify_committers = false;
        }
        {
          name = "officialRelease";
          type = "boolean";
          value = "false";
          notify_committers = false;
        }
        {
          name = "supportedSystems";
          type = "nix";
          value = ''[ "x86_64-linux" ]'';
        }
      ];
    };
  };
}