{config, pkgs, ...}: let
  # openVpnPwd = config.sops.secrets."software/proton/openvpn/password".path;
  # openVpnUser = config.sops.secrets."software/proton/openvpn/username".path;
in {
  services.restic.backups = {
    daily = {
      paths = [
        "/srv/media-server/arrstack"
      ];
      exclude = [
      ];
    };
  };

  virtualisation.arion = {
    backend = "podman-socket";
    projects.jellyfin = {
      settings = {
        services.gluetun.service = {
          ports = [
            "8076:8076"
          ];
          image = "qmcgaw/gluetun";
          restart = "always";
          volumes = [
            "/srv/media-server/arrstack/gluetun:/gluetun"
          ];
          environment = {
            VPN_SERVICE_PROVIDE = "protonvpn";
            VPN_TYPE = "openvpn";

            SERVER_COUNTRIES = "Switzerland";
          };
          devices = ["/dev/net/tun:/dev/net/tun"];
          command = [
            "${pkgs.writeScript "entrypoint" "export TEST=test"}"
          ];
        };
      };
    };
  };
}