{ config, lib, pkgs, ... }:
let
  # {{{ Jupyterhub/lab env
  appEnv = pkgs.python3.withPackages (p: with p; [
    jupyterhub
    jupyterlab
    jupyterhub-systemdspawner
    jupyter-collaboration
  ]);
  # }}}
in
{
  systemd.services.jupyterhub.path = [ pkgs.texliveSmall ]; # LaTeX stuff is useful for matplotlib

  services.jupyterhub = {
    enable = true;
    port = 8420;

    jupyterhubEnv = appEnv;
    jupyterlabEnv = appEnv;

    # {{{ Spwaner & auth config
    extraConfig = ''
      c.Authenticator.allowed_users = {'adrielus', 'javi'}
      c.Authenticator.admin_users = {'adrielus'}

      c.Spawner.notebook_dir='${config.users.users.pilot.home}/projects/notebooks'
      c.SystemdSpawner.mem_limit = '2G'
      c.SystemdSpawner.cpu_limit = 2.0
    '';
    # }}}
    # {{{ Python 3 kernel
    kernels.python3 =
      let env = (pkgs.python3.withPackages (p: with p; [
        ipykernel
        numpy
        scipy
        matplotlib
        tabulate
      ]));
      in
      {
        displayName = "Numerical mathematics setup";
        argv = [
          "${env.interpreter}"
          "-m"
          "ipykernel_launcher"
          "-f"
          "{connection_file}"
        ];
        language = "python";
        logo32 = "${env}/${env.sitePackages}/ipykernel/resources/logo-32x32.png";
        logo64 = "${env}/${env.sitePackages}/ipykernel/resources/logo-64x64.png";
      };
    # }}}
  };

  # {{{ Javi user
  sops.secrets.javi_password = {
    sopsFile = ../secrets.yaml;
    neededForUsers = true;
  };

  users.users.javi = {
    isNormalUser = true;
    hashedPasswordFile = config.sops.secrets.javi_password.path;
  };
  # }}}
  # {{{ Networking & storage
  satellite.cloudflared.targets."jupyter.moonythm.dev".port = config.services.jupyterhub.port;

  environment.persistence."/persist/state".directories = [
    "/var/lib/${config.services.jupyterhub.stateDirectory}"
  ];
  # }}}
}