{ config, ... }:

let
  inherit (config.networking) ports;
in
{
  sops.secrets.myintercom-doorbell-password = {
    sopsFile = ../secrets.yaml;
    owner = "asterisk";
  };
  services.myintercom-doorbell = {
    enable = true;
    host = "sprechanlage.lan.kbh.jalr.de";
    username = "btxpvt0002";
    passwordFile = config.sops.secrets.myintercom-doorbell-password.path;
    audiosocket = {
      address = "127.0.0.1";
      port = ports.doorbell-audiosocket.tcp;
      uuid = "4960ab41-dbef-4773-a25e-90536d97345e";
    };
    callerId = "Sprechanlage";
    cam = {
      enable = true;
      bindAddress = "192.168.0.1";
      webrtcPort = ports.doorbell-webrtc.tcp;
      webrtcIceTcpPort = ports.doorbell-webrtc-ice.tcp;
    };
  };
  networking.firewall.interfaces.lechner.allowedTCPPorts = [
    ports.doorbell-webrtc.tcp
    ports.doorbell-webrtc-ice.tcp
  ];
}