{ lib, config, ... }:

with lib;
let
  cfg = config.services.brook;
in
{
  options.services.brook.prosody = {
    enable = mkEnableOption "brook XMPP chat with prosody";

    port = mkOption {
      type = types.int;
      default = 5281;
      description = ''
        Specify the port that prosody's web server is listening on.
      '';
    };

    guest-domain = mkOption {
      type = types.string;
      description = ''
        The virtualhost prosody uses as an anonymous user scope.
        By default prosody can either run in normal user mode, or in
        anonymous mode.  Becuase the stream chat doesn't require registration,
        this creates a new virtualhost to achieve this.
      '';
    };

    certRoot = mkOption {
      type = types.string;
      description = ''
        Pass in the root path to the certificates that the 
        prosody virtualhost should use.
      '';
    };
  };

  config = mkIf cfg.prosody.enable {
    services.prosody = {
      modules = { bosh = true; websocket = true; };
      
      virtualHosts."${cfg.prosody.guest-domain}" = {
        enable = true;
        domain = "${cfg.prosody.guest-domain}";
        ssl = {
          cert = "${cfg.prosody.certRoot}/fullchain.pem";
          key = "${cfg.prosody.certRoot}/key.pem";
        };
        extraConfig = ''
        authentication = "anonymous"
        http_host = ${cfg.prosody.guest-domain}
      '';
      };

      extraConfig = services.prosody.extraConfig + ''
        consider_bosh_secure = true
      '';
    };
  };
}