{
  service_configs,
  lib,
  ...
}:
{
  imports = [
    (lib.serviceMountWithZpool "monero" service_configs.zpool_hdds [
      service_configs.monero.dataDir
    ])
  ];

  services.monero = {
    enable = true;
    dataDir = service_configs.monero.dataDir;
    rpc = {
      restricted = true;
    };
  };

  systemd.tmpfiles.rules = [
    "Z ${service_configs.monero.dataDir} 0700 monero monero"
  ];
}