{ config, lib, nixpkgs-us, ... }: {

    options.sysconfig.virtualization.pihole.enable = lib.options.mkOption {
        type = lib.types.bool;
        default = false;
    };


    config = lib.mkIf config.sysconfig.virtualization.pihole.enable {
/*        sops.secrets."pihole/pass" = {};

        sops.templates."pihole.env" = {
            content = ''
                WEBPASSWORD=${config.sops.placeholder."pihole/pass"}
            '';

            path = "/ssd1/Pihole/.env";
        };
*/

        networking = {
            nameservers = [ "192.168.100.28" ];
        };

        containers.pihole = {

            autoStart = true;
            privateNetwork = true;
            hostAddress = "192.168.100.10";
            localAddress = "192.168.100.28";

            timeoutStartSec = "infinity";

            config = let
                pkgs-us = import nixpkgs-us { system = "x86_64-linux"; };
            in {

                /*imports = [
                    (import "${nixpkgs-us}/nixos/modules/services/networking/pihole-ftl.nix" { config = config.containers.pihole.config; inherit lib; pkgs = pkgs-us;})
                        (import "${nixpkgs-us}/nixos/modules/services/web-apps/pihole-web.nix" { config = config.containers.pihole.config; inherit lib; pkgs = pkgs-us;})
                ];*/

                services = {
                    pihole-web = {
                        enable = true;

                        hostName = "pihole.local";

                        ports = [ 80 ];
                    };

                    pihole-ftl = {
                        enable = true;

                        openFirewallDNS = true;
                        openFirewallWebserver = true;

                        lists = [
                        {
                            url = "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts";
                        }
                        ];

                        settings = {
                            dns.upstreams = [ "127.0.0.1#5335" ];
                        };
                    };

                    unbound = {
                        enable = true;

                        settings = {
                            server = {
                                interface = [ "127.0.0.1" ];
                                port = 5335;

                                access-control = [ "127.0.0.1 allow" ];

                                harden-glue = true;
                                harden-dnssec-stripped = true;

                                use-caps-for-id = false;

                                prefetch = true;

                                edns-buffer-size = 1232;

                                hide-identity = true;
                                hide-version = true;
                            };

                            forward-zone = [
                                {
                                    name = "cloudflare";
                                    forward-addr = [
                                        "1.1.1.1#one.one.one.one"
                                        "1.0.0.1#one.one.one.one"
                                    ];
                                    forward-tls-upstream = true;
                                }
                            ];

                        };
                    };

                };

                users.users."root" = {
                    openssh.authorizedKeys.keys = [
                    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICe6Ito5m9c4Tij8zI74L8hnd/QRchEO/cc5CH94mjMC nathan@homebox"
                    ];
                };

                networking = {
                    firewall.allowedTCPPorts = [ 22 ];
                    #nameservers = [ "1.1.1.1" "1.0.0.1" ];
                };

                services.openssh = {
                    enable = true;
                    settings = {
                        PermitRootLogin = lib.mkForce "yes";
                        PasswordAuthentication = false;
                        KbdInteractiveAuthentication = false;
                    };
                };
                
                system.stateVersion = "25.05";
            };
        };
    };

    
}