{ config, lib, ... }: {
  age.secrets.minio = { file = ../../secrets/minio.age; owner = "minio"; };

  services.minio = {
    enable = true;
    dataDir = [
      # "/var/lib/minio/data"
      "/mnt/raid/minio/data/"
    ];
    rootCredentialsFile = config.age.secrets.minio.path;
  };

  systemd.services.minio.serviceConfig.ExecStart =
    let cfg = config.services.minio; in
    lib.mkForce "${cfg.package}/bin/minio server --json --address ${cfg.listenAddress} --console-address ${cfg.consoleAddress} ${toString cfg.dataDir}";
}