{ config, lib, pkgs, ... }:

{
  services.hydra = {
    enable = true;
    hydraURL = "http://abbenay:3000";
    buildMachinesFiles = [];
    useSubstitutes = true;
    minimumDiskFree = 10;
    notificationSender = "hydra@abbenay";
  };

  nix.settings.allowed-uris = [
    "https:"
    "ssh:"
    "path:"
    "http:"
  ];

  # required because of ancient state version defaulting to postgresql 11
  services.postgresql.package = pkgs.postgresql;

  networking.firewall.allowedTCPPorts = [ 3000 ];
}