{ extraInfo, ... }:
{
  services.jellyfin.enable = true;
  services.nginx.virtualHosts.${extraInfo.jellyfinURI} = {
    enableACME = true;
    forceSSL = true;

    locations = {
      "/" = {
        proxyPass = "http://localhost:8096";
      };

      "/socket" = {
        proxyPass = "http://localhost:8096";
        proxyWebsockets = true;
      };
    };
  };

  services.sonarr = {
    enable = true;
    openFirewall = true;
  };

  services.radarr = {
    enable = true;
    openFirewall = true;
  };

  # Torrent client
  services.deluge = {
    enable = true;
    web.enable = true;
  };

  systemd.services.deluged.bindsTo = [ "wireguard-wg1.service" ];
  systemd.services.deluged.requires = [ "network-online.target" ];
  systemd.services.deluged.serviceConfig.NetworkNamespacePath = "/var/run/netns/wg1ns";
  systemd.services.deluged.serviceConfig.PrivateNetwork = true;
}