{ lib, pkgs, config, ... }:
let
  dbname = "paperless";
  dbuser = "paperless";
  dbpass = "paperless";
in
{

  services.paperless = {
    enable = true;
    consumptionDirIsPublic = true;
    address = "192.168.178.51";
    user = dbuser;
    settings = {
      PAPERLESS_CONSUMER_IGNORE_PATTERN = [
        ".DS_STORE/*"
        "desktop.ini"
      ];
      PAPERLESS_OCR_LANGUAGE = "deu+eng";
      PAPERLESS_TIME_ZONE = "Europe/Berlin";
      PAPERLESS_CONSUMER_ENABLE_BARCODES = true;
      PAPERLESS_CONSUMER_ENABLE_ASN_BARCODE = true;
      PAPERLESS_CONSUMER_BARCODE_SCANNER = "ZXING";
      PAPERLESS_OCR_USER_ARGS = {
        optimize = 1;
        pdfa_image_compression = "lossless";
      };
      PAPERLESS_DBENGINE = "postgres";
      PAPERLESS_DBHOST = "/run/postgresql";
      PAPERLESS_DUSER = dbuser;
      PAPERLESS_DBNAME = dbname;
      PAPERLESS_DBPASS = dbpass;
    };
  };

  # enable a PostgreSQL DB 
  services.postgresql = {
    enable = true;
    ensureDatabases = [ dbname ];
    ensureUsers = [{
      name = dbuser;
      ensureDBOwnership = true;
    }];
  };

  # Paperless-ngx also requires a redis cache
  services.redis.enable = true;

  # 28981 is the default paperless web port
  networking.firewall.allowedTCPPorts = [ 28981 ];
}