{ config, pkgs, ... }:

let
  inherit (config.networking) ports;
  interfaces = import ../interfaces.nix;
in
{
  services.unifi = {
    enable = true;
    unifiPackage = pkgs.unifi8;
    mongodbPackage = pkgs.mongodb-7_0;
  };
  networking.firewall.interfaces."${interfaces.lan}".allowedTCPPorts = [
    ports.unifi-http.tcp
    ports.unifi-https.tcp
  ];
}