{
  config,
  lib,
  ...
}:

{

  options.zpha.configure.xmppServer.enable = lib.mkEnableOption "";

  config = lib.mkIf config.zpha.configure.xmppServer.enable {
    sops.secrets = {
      "restic/prosody/repositoryPassword" = { };
      "restic/prosody/sshPrivateKey" = { };
    };

    common.services = {
      resticBackup.prosody = {
        inherit (config.services.prosody) user;
        enable = true;
        targets = [
          "restic-target.fc9f.de"
          "isodon.fc9f.de"
        ];
        sshKeyFile = config.sops.secrets."restic/prosody/sshPrivateKey".path;
        passwordFile = config.sops.secrets."restic/prosody/repositoryPassword".path;
        paths = [ config.services.prosody.dataDir ];
      };

      prosody = {
        enable = true;
        domain = "zaphyra.eu";
        adminUsers = [ "katja@zaphyra.eu" ];
      };
    };
  };

}