{ config, pkgs, lib, ... }:
{
  config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
    # Kept even with 7DTD commented out: memos/profilarr containers rely on these.
    virtualisation.docker.enable = true;
    virtualisation.oci-containers.backend = "docker";

    ## <----- 7 DAYS TO DIE ----> ##
    # Commented out 2026-07 — servers not in regular use. Saves remain in
    # /var/lib/7dtd{,-coop}; uncomment below (and forwards in ports.toml)
    # to bring them back.

    # systemd.tmpfiles.rules = [
    #   "d /var/lib/7dtd             0755 root root -"
    #   "d /var/lib/7dtd/saves       0755 root root -"
    #   "d /var/lib/7dtd/serverfiles 0755 root root -"
    #   "d /var/lib/7dtd/lgsm        0755 root root -"
    #   "d /var/lib/7dtd/log         0755 root root -"
    #   "d /var/lib/7dtd/backups     0755 root root -"
    #   "d /var/lib/7dtd-coop             0755 root root -"
    #   "d /var/lib/7dtd-coop/saves       0755 root root -"
    #   "d /var/lib/7dtd-coop/serverfiles 0755 root root -"
    #   "d /var/lib/7dtd-coop/lgsm        0755 root root -"
    #   "d /var/lib/7dtd-coop/log         0755 root root -"
    #   "d /var/lib/7dtd-coop/backups     0755 root root -"
    # ];

    # virtualisation.oci-containers.containers."7dtd" = {
    #   image = "vinanrra/7dtd-server:latest";
    #   volumes = [
    #     "/var/lib/7dtd/saves:/home/sdtdserver/.local/share/7DaysToDie"
    #     "/var/lib/7dtd/serverfiles:/home/sdtdserver/serverfiles"
    #     "/var/lib/7dtd/lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver"
    #     "/var/lib/7dtd/log:/home/sdtdserver/log"
    #     "/var/lib/7dtd/backups:/home/sdtdserver/lgsm/backup"
    #   ];
    #   ports = [
    #     "26900:26900/tcp"
    #     "26900:26900/udp"
    #     "26901:26901/udp"
    #     "26902:26902/udp"
    #     # WebDashboard — localhost-only; nginx reverse-proxies it with Authelia
    #     "127.0.0.1:8090:8080/tcp"
    #   ];
    #   environment = {
    #     START_MODE = "1";
    #     VERSION    = "stable";
    #     TimeZone   = "Europe/Stockholm";
    #     TEST_ALERT = "NO";
    #   };
    # };

    # virtualisation.oci-containers.containers."7dtd-coop" = {
    #   image = "vinanrra/7dtd-server:latest";
    #   volumes = [
    #     "/var/lib/7dtd-coop/saves:/home/sdtdserver/.local/share/7DaysToDie"
    #     "/var/lib/7dtd-coop/serverfiles:/home/sdtdserver/serverfiles"
    #     "/var/lib/7dtd-coop/lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver"
    #     "/var/lib/7dtd-coop/log:/home/sdtdserver/log"
    #     "/var/lib/7dtd-coop/backups:/home/sdtdserver/lgsm/backup"
    #   ];
    #   ports = [
    #     "26910:26900/tcp"
    #     "26910:26900/udp"
    #     "26911:26901/udp"
    #     "26912:26902/udp"
    #     "127.0.0.1:8091:8080/tcp"
    #   ];
    #   environment = {
    #     # Start-only. Serverfiles are seeded by rsync from the main 7dtd
    #     # install — SteamCMD anonymous install fails on a fresh dir, so
    #     # we share the binaries and skip the update path here. (Mode 2
    #     # is "Update + STOP", mode 0/2/4 all stop after their action.)
    #     START_MODE = "1";
    #     VERSION    = "stable";
    #     TimeZone   = "Europe/Stockholm";
    #     TEST_ALERT = "NO";
    #   };
    # };

    # systemd.services."7dtd-configure" = {
    #   description = "Patch 7DTD sdtdserver.xml on first install";
    #   after = [ "docker-7dtd.service" ];
    #   wants = [ "docker-7dtd.service" ];
    #   wantedBy = [ "multi-user.target" ];
    #   path = with pkgs; [ gnused coreutils systemd ];
    #   script = ''
    #     MARKER=/var/lib/7dtd/.configured
    #     CONFIG=/var/lib/7dtd/serverfiles/sdtdserver.xml
    #     if [ -f "$MARKER" ]; then
    #       echo "Already configured; skipping."
    #       exit 0
    #     fi
    #     echo "Waiting for $CONFIG (install can take 15+ minutes on first boot)..."
    #     for i in $(seq 1 180); do
    #       [ -f "$CONFIG" ] && break
    #       sleep 10
    #     done
    #     if [ ! -f "$CONFIG" ]; then
    #       echo "Timed out waiting for $CONFIG; will retry next boot."
    #       exit 1
    #     fi
    #
    #     set_prop() {
    #       sed -i "s|<property name=\"$1\"[^/]*value=\"[^\"]*\"|<property name=\"$1\" value=\"$2\"|" "$CONFIG"
    #     }
    #
    #     set_prop ServerName          "Nordhammer.it"
    #     set_prop ServerPassword      "DaveSmells"
    #     set_prop GameWorld           "RWG"
    #     set_prop WorldGenSeed        "Nordhammer"
    #     set_prop WorldGenSize        "8192"
    #     set_prop GameName            "Nordhammer"
    #     set_prop WebDashboardEnabled "true"
    #     set_prop EACEnabled          "false"
    #     set_prop StormFreq           "0"
    #
    #     touch "$MARKER"
    #     echo "Patched; restarting container to apply."
    #     systemctl restart docker-7dtd.service
    #   '';
    #   serviceConfig = {
    #     Type = "oneshot";
    #     RemainAfterExit = true;
    #   };
    # };

    # systemd.services."7dtd-coop-configure" = {
    #   description = "Patch 7DTD-coop sdtdserver.xml on first install";
    #   after = [ "docker-7dtd-coop.service" ];
    #   wants = [ "docker-7dtd-coop.service" ];
    #   wantedBy = [ "multi-user.target" ];
    #   path = with pkgs; [ gnused coreutils systemd ];
    #   script = ''
    #     MARKER=/var/lib/7dtd-coop/.configured
    #     CONFIG=/var/lib/7dtd-coop/serverfiles/sdtdserver.xml
    #     if [ -f "$MARKER" ]; then
    #       echo "Already configured; skipping."
    #       exit 0
    #     fi
    #     echo "Waiting for $CONFIG (install can take 15+ minutes on first boot)..."
    #     for i in $(seq 1 180); do
    #       [ -f "$CONFIG" ] && break
    #       sleep 10
    #     done
    #     if [ ! -f "$CONFIG" ]; then
    #       echo "Timed out waiting for $CONFIG; will retry next boot."
    #       exit 1
    #     fi
    #
    #     set_prop() {
    #       sed -i "s|<property name=\"$1\"[^/]*value=\"[^\"]*\"|<property name=\"$1\" value=\"$2\"|" "$CONFIG"
    #     }
    #
    #     set_prop ServerName             "Nordhammer Co-op"
    #     set_prop ServerPassword         "DaveSmells"
    #     set_prop ServerVisibility       "0"
    #     set_prop ServerMaxPlayerCount   "2"
    #     set_prop GameWorld              "RWG"
    #     set_prop WorldGenSeed           "NordhammerCoop"
    #     set_prop WorldGenSize           "8192"
    #     set_prop GameName               "NordhammerCoop"
    #     set_prop WebDashboardEnabled    "true"
    #     set_prop EACEnabled             "false"
    #     set_prop StormFreq              "0"
    #
    #     touch "$MARKER"
    #     echo "Patched; restarting container to apply."
    #     systemctl restart docker-7dtd-coop.service
    #   '';
    #   serviceConfig = {
    #     Type = "oneshot";
    #     RemainAfterExit = true;
    #   };
    # };

    # # Stop 7DTD containers from crash-looping forever — after 5 failures
    # # within 5 minutes, systemd gives up.  Without this, a broken container
    # # spawns a new veth pair every 30 s, flooding systemd-networkd and
    # # potentially interfering with DHCP on the WAN interface.
    # systemd.services."docker-7dtd".serviceConfig = {
    #   Restart = lib.mkForce "on-failure";
    #   RestartSec = "30s";
    #   StartLimitIntervalSec = 300;
    #   StartLimitBurst = 5;
    # };
    # systemd.services."docker-7dtd-coop".serviceConfig = {
    #   Restart = lib.mkForce "on-failure";
    #   RestartSec = "30s";
    #   StartLimitIntervalSec = 300;
    #   StartLimitBurst = 5;
    # };
  };
}