{
  inputs.nixpkgs.url  = "github:NixOS/nixpkgs/nixos-unstable";

  outputs = {
    self,
    nixpkgs,
    ...
  } @ inputs:
  let
    flake = inputs: system: nixpkgs.lib.mapAttrs (name: flake: {
      # TODO filter non-flake inputs
      nixos = flake.nixosModules
        or null;
      pkgs = flake.packages.${system}
        or flake.legacyPackages.${system}
        or null;
      lib = flake.lib.${system}
        or flake.lib
        or null;
    }) inputs;
    forSystems = systems: f: nixpkgs.lib.genAttrs systems (system: f rec {
      inherit system;
      pkgs = nixpkgs.legacyPackages.${system};
      lib  = nixpkgs.legacyPackages.${system}.lib;
      flakes = flake inputs system;
    });
    forAllSystems = forSystems [
      "x86_64-linux"
      "aarch64-linux"
      #"riscv64-linux"
    ];
  in {
    packages = forAllSystems ({ pkgs, flakes, ...}: {
      remi = with pkgs.python3.pkgs; buildPythonPackage rec {
        pname = "remi";
        version = "1.0";
        src = fetchPypi {
          inherit pname version;
          hash = "sha256-65qc+td/mk/RSUcRWbPGVbS9S0F1o1S9zIkJb0Ek2eQ=";
          extension = "zip";
        };
      };
      grzegorz-clients = with pkgs.python3.pkgs; buildPythonPackage {
        pname = "grzegorz-clients";
        version = (builtins.fromTOML (builtins.readFile ./pyproject.toml)).tool.poetry.version;
        format = "pyproject";
        src = ./.;
        nativeBuildInputs = [ poetry-core ];
        propagatedBuildInputs = [ setuptools youtube-dl flakes.self.pkgs.remi requests typer urllib3 ];
      };
      default = flakes.self.pkgs.grzegorz-clients;
    });

    apps = forAllSystems ({ system, ...}: rec {
      grzegorz-webui.type = "app";
      grzegorz-webui.program = "${self.packages.${system}.grzegorz-clients}/bin/grzegorz-webui";
      default = grzegorz-webui;
    });

    nixosModules.grzegorz-webui = { config, pkgs, ... }: let
      inherit (pkgs) lib;
      cfg = config.services.grzegorz-webui;
    in {
      options.services.grzegorz-webui = {

        enable = lib.mkEnableOption (lib.mdDoc "grzegorz");

        package = lib.mkPackageOption self.packages.${config.nixpkgs.system} "grzegorz-clients" { };

        listenAddr = lib.mkOption {
            type = lib.types.str;
            default = "::";
        };
        listenPort = lib.mkOption {
            type = lib.types.port;
            default = 8080;
        };
        /** /
        listenWebsocketPort = lib.mkOption {
            type = lib.types.port;
            default = 0;
        };
        /**/
        multipleInstance = lib.mkOption {
            type = lib.types.bool;
            default = false;
        };
        apiBase = lib.mkOption {
            type = lib.types.str;
            default = "https://brzeczyszczykiewicz.pvv.ntnu.no/api";
        };
      };
      config = {
        systemd.services.grzegorz-webui = lib.mkIf cfg.enable {
          description = "grzegorz-webui";
          after = [ "network.target" ];
          wantedBy = [ "multi-user.target" ];
          serviceConfig = {
            User = "grzegorz-webui";
            Group = "grzegorz-webui";
            DynamicUser = true;
            #StateDirectory = "grzegorz-webui";
            #CacheDirectory = "grzegorz-webui";
            ExecStart = escapeShellArgs [
              "${pkgs.gregorz-clients}/bin/gregorz-webui"
              "--address" cfg.listenAddr
              "--port" cfg.listenPort
              "--api-base" cfg.apiBase
              #"--websocket-port" cfg.listenWebsocketPort
              "--multiple-instance" cfg.multipleInstance
            ];
            Restart = "on-failure";
          };
        };

        networking.firewall = mkIf cfg.openFirewall {
          allowedTCPPorts = [ cfg.listenPort ];
        };
      };
    };
  };
}