{ ... }: {

    flake.nixosModules.default = { config, lib, pkgs, ... }: let

    subdomain = "n8n";

    name = "n8n";

    in {

        options.sysconfig.docker."${name}".enable = with lib; mkOption {
            type = with types; bool;
            default = false;
        };

        config = lib.mkIf (config.sysconfig.docker."${name}".enable && config.sysconfig.docker.enable) {


            virtualisation.oci-containers.containers."${name}" = {
                image = "docker.n8n.io/n8nio/n8n";

# unstable, waiting for 26.05
#pull = "newer";

                hostname = "${subdomain}.esotericbytes.com";

                networks = [
                    "docker-main"
                ];

                labels = {
                    "traefik.enable" = "true";
                    "traefik.http.routers.${name}.entrypoints" = "localsecure";
                    "traefik.http.routers.${name}.rule" = "Host(`${subdomain}.esotericbytes.com`)";
                    "traefik.http.routers.${name}.service" = "${name}";
                    "traefik.http.routers.${name}.tls.certResolver" = "cloudflare";

                    "traefik.http.services.${name}.loadbalancer.server.port" = "5678";
                };

                ports = [
                ];

                extraOptions = [
                    "--ip=192.168.101.2"
                ];

                volumes = [
                    "vol_n8n:/etc/n8n"
                ];

                environment = {
                    GENERIC_TIMEZONE = "America/Chicago";
                    TZ = "America/Chicago";
                    N8N_DIAGNOSTICS_ENABLED = "false";
                    N8N_VERSION_NOTIFICATIONS_ENABLED = "false";
                    N8N_TEMPLATES_ENABLED = "false";

                    EXTERNAL_FRONTEND_HOOKS_URLS = "";
                    N8N_DIAGNOSTICS_CONFIG_FRONTEND = "";
                    N8N_DIAGNOSTICS_CONFIG_BACKEND = "";

                    N8N_SECURE_COOKIE = "false";
                };
            };

            systemd.services."docker-n8n" = {
                serviceConfig = {
                    Restart = lib.mkOverride 90 "always";
                    RestartMaxDelaySec = lib.mkOverride 90 "1m";
                    RestartSec = lib.mkOverride 90 "100ms";
                    RestartSteps = lib.mkOverride 90 9;
                };
                after = [
                    "docker-network-setup.service"
                        "docker-volume-n8n.service" 
                ];
                requires = [
                    "docker-network-setup.service"
                        "docker-volume-n8n.service" 
                ];
                partOf = [
                    "docker-compose-n8n-root.target"
                ];
                wantedBy = [
                    "docker-compose-n8n-root.target"
                ];
            };

            systemd.services."docker-volume-n8n" = {
                path = [ pkgs.docker ];
                serviceConfig = {
                    Type = "oneshot";
                    RemainAfterExit = true;
                };
                script = ''
                    docker volume inspect vol_n8n || docker volume create vol_n8n --driver=local
                    '';
                partOf = [ "docker-compose-n8n-root.target" ];
                wantedBy = [ "docker-compose-n8n-root.target" ];
            };

        };
    };
}