{
  service_configs,
  lib,
  ...
}:
{
  imports = [
    (lib.serviceMountDeps "monero" [
      service_configs.monero.dataDir
    ])
    (lib.serviceDependZpool "monero" service_configs.zpool_hdds)
  ];

  services.monero = {
    enable = true;
    dataDir = service_configs.monero.dataDir;
    rpc = {
      restricted = true;
    };
  };

  systemd.tmpfiles.rules = [
    "Z ${service_configs.monero.dataDir} 0700 monero monero"
  ];
}