{
  inputs',
  lib,
  pkgs,
  pkgs-hashicorp,
  secret,
  config,
  config',
  ...
}: let
  inherit
    (lib)
    concatStringsSep
    singleton
    concatMapStringsSep
    splitString
    ;
in {
  services.hashicorp.vault-agent = {
    settings.template = [
      {
        source = pkgs.writeText "envoy-klipper.token.vtmpl" ''
          {{ with secret "consul/creds/envoy-klipper" }}{{ .Data.token }}{{ end }}
        '';
        destination = "/run/secrets/klipper/envoy-klipper.token";
        command = let
          serviceList = ["hashicorp-envoy-mainsail"];
        in
          pkgs.writeShellScript "envoy-mainsail-reload.sh"
          ''
            sudo systemd-run -P --machine klipper /run/current-system/sw/bin/bash -l -c \
              'systemctl try-reload-or-restart ${concatStringsSep " " serviceList}' || true
          '';
      }
    ];
  };

  fileSystems."/var/lib/klipper" = {
    device = "blowhole-zpool/persist/klipper";
    fsType = "zfs";
  };

  systemd.services."container@klipper" = {
    restartIfChanged = lib.mkForce false;

    requires = ["vault-unsealed.service"];
    after = ["vault-unsealed.service"];
  };

  containers.klipper = {
    ephemeral = true;
    autoStart = true;
    privateNetwork = true;

    localAddress = "10.64.99.6";
    hostAddress = "10.64.99.5";

    bindMounts = {
      "/run/secrets" = {
        hostPath = "/run/secrets/klipper";
        isReadOnly = true;
      };
      "/var/lib/klipper" = {
        hostPath = "/var/lib/klipper";
        isReadOnly = false;
      };
      "/var/lib/moonraker/gcodes" = {
        hostPath = "/var/lib/klipper/gcodes";
        isReadOnly = false;
      };
      "/dev/ttyEnder3" = {
        hostPath = "/dev/serial/by-id/usb-Klipper_lpc1768_13E0FF0C469027AEBAA84A52871E00F5-if00";
        isReadOnly = false;
      };
    };

    allowedDevices = singleton {
      node = "/dev/serial/by-id/usb-Klipper_lpc1768_13E0FF0C469027AEBAA84A52871E00F5-if00";
      modifier = "rwm";
    };

    config = {
      nixpkgs.config.allowUnfreePredicate = pkg:
        builtins.elem (lib.getName pkg) [
          "consul-1.17.2"
        ];
      nixpkgs.overlays = config.nixpkgs.overlays;

      imports = with config'.flake.nixosModules; [
        hashicorp
        hashicorp-envoy
      ];

      networking.firewall.interfaces.eth0.allowedTCPPorts = [19000];

      services.hashicorp-envoy.mainsail = {
        consulPackage = pkgs-hashicorp.consul;
        envoyPackage = inputs'.nixpkgs-stable.legacyPackages.${pkgs.stdenv.system}.envoy;
        service = {
          name = "mainsail";
          id = "mainsail";
          address = "10.64.99.6";
          port = 80;

          connect.sidecar_service = {
            port = 19000;
          };
        };

        environment = {
          "CONSUL_HTTP_ADDR" = "http://${secret.network.ips.blowhole.ip or ""}:8500";
          "CONSUL_GRPC_ADDR" = "http://${secret.network.ips.blowhole.ip or ""}:8502";
          "CONSUL_HTTP_TOKEN_FILE" = "/run/secrets/envoy-klipper.token";
        };

        address = "10.64.99.6:19000";
        adminBind = "127.0.0.1:19100";
        hotRestart = false;
      };

      users.users.klipper = {
        home = "/var/lib/klipper";
        isSystemUser = true;
        group = "klipper";
        uid = 321;
      };

      users.groups.klipper = {
        gid = 321;
      };

      services.klipper = {
        enable = true;

        user = "klipper";
        group = "klipper";

        package = pkgs.klipper;

        settings = let
          indentGcode = gcode:
            "\n" + (concatMapStringsSep "\n" (x: "    " + x) (splitString "\n" gcode));
        in {
          stepper_x = {
            step_pin = "P2.2";
            dir_pin = "!P2.6";
            enable_pin = "!P2.1";
            rotation_distance = "40";
            microsteps = "16";
            endstop_pin = "P1.29"; # P1.28 for X-max
            position_endstop = "0";
            position_max = "235";
            homing_speed = "50";
          };

          stepper_y = {
            step_pin = "P0.19";
            dir_pin = "!P0.20";
            enable_pin = "!P2.8";
            rotation_distance = "40";
            microsteps = "16";
            endstop_pin = "P1.27"; # P1.26 for Y-max
            position_endstop = "0";
            position_max = "235";
            homing_speed = "50";
          };

          stepper_z = {
            step_pin = "P0.22";
            dir_pin = "P2.11";
            enable_pin = "!P0.21";
            rotation_distance = "8";
            microsteps = "16";
            endstop_pin = "P1.25"; # P1.24 for Z-max"
            position_min = "-4.5";
            position_endstop = "1.620"; # "1.730";
            position_max = "250";
          };

          extruder = {
            step_pin = "P2.13";
            dir_pin = "P0.11";
            enable_pin = "!P2.12";
            rotation_distance = "23.3236074";
            gear_ratio = "3:1";
            microsteps = "16";
            nozzle_diameter = "0.400";
            filament_diameter = "1.750";
            heater_pin = "P2.7";
            sensor_type = "PT1000";
            sensor_pin = "P0.24";
            control = "pid";
            pid_Kp = "22.015";
            pid_Ki = "0.923";
            pid_Kd = "131.264";
            min_temp = "0";
            max_temp = "260";
            pressure_advance = "0.92";
          };

          bed_screws = {
            screw1 = "30,35";
            screw2 = "200,35";
            screw3 = "200,205";
            screw4 = "30,205";
          };

          "heater_fan my_nozzle_fan" = {
            pin = "P2.4";
            heater = "extruder";
            heater_temp = "50.0";
            fan_speed = "1.0";
          };

          heater_bed = {
            heater_pin = "P2.5";
            sensor_type = "EPCOS 100K B57560G104F";
            sensor_pin = "P0.23";
            control = "pid";
            pid_Kp = "72.917";
            pid_Ki = "1.303";
            pid_Kd = "1019.921";
            min_temp = "0";
            max_temp = "80";
          };

          fan = {
            pin = "P2.3";
          };

          mcu = {
            serial = "/dev/ttyEnder3";
          };

          printer = {
            kinematics = "cartesian";
            max_velocity = "200";
            max_accel = "2000";
            max_z_velocity = "25";
            max_z_accel = "100";
          };

          virtual_sdcard = {
            path = "/var/lib/moonraker/gcodes";
          };

          ### Mainsail
          pause_resume = {};
          display_status = {};
          endstop_phase = {};

          "tmc2208 stepper_x" = {
            uart_pin = "P1.17";
            run_current = "0.550";
            hold_current = "0.275";
            stealthchop_threshold = "250";
          };

          "tmc2208 stepper_y" = {
            uart_pin = "P1.15";
            run_current = "0.550";
            hold_current = "0.275";
            stealthchop_threshold = "250";
          };

          "tmc2208 stepper_z" = {
            uart_pin = "P1.10";
            run_current = "0.550";
            hold_current = "0.275";
            stealthchop_threshold = "30";
          };

          "tmc2208 extruder" = {
            uart_pin = "P1.8";
            run_current = "0.600";
            hold_current = "0.360";
            stealthchop_threshold = "0";
          };

          board_pins = {
            aliases =
              indentGcode
              ''
                # EXP1 header
                EXP1_1=P1.30, EXP1_3=P1.18, EXP1_5=P1.20, EXP1_7=P1.22, EXP1_9=<GND>,
                EXP1_2=P0.28, EXP1_4=P1.19, EXP1_6=P1.21, EXP1_8=P1.23, EXP1_10=<5V>,
                # EXP2 header
                EXP2_1=P0.17, EXP2_3=P3.26, EXP2_5=P3.25, EXP2_7=P1.31, EXP2_9=<GND>,
                EXP2_2=P0.15, EXP2_4=P0.16, EXP2_6=P0.18, EXP2_8=<RST>, EXP2_10=<NC>
                # Pins EXP2_1, EXP2_6, EXP2_2 are also MISO, MOSI, SCK of bus "ssp0"
              '';
          };

          display = {
            lcd_type = "st7920";
            cs_pin = "EXP1_7";
            sclk_pin = "EXP1_6";
            sid_pin = "EXP1_8";
            encoder_pins = "^EXP1_5, ^EXP1_3";
            click_pin = "^!EXP1_2";
          };

          # "endstop_phase stepper_z" =
          #   { endstop_phase = "29";
          #   };

          # "endstop_phase stepper_y" =
          #   { endstop_phase = "57";
          #   };

          # "endstop_phase stepper_x" =
          #   { endstop_phase = "3";
          #   };

          "gcode_macro M600" = {
            gcode =
              indentGcode
              ''
                {% set x = params.X|default(50)|float %}
                {% set y = params.Y|default(0)|float %}
                {% set z = params.Z|default(10)|float %}
                SAVE_GCODE_STATE NAME=M600_state
                PAUSE
                G91
                G1 E-.8 F2700
                G1 Z{z}
                G90
                G1 X{x} Y{y} F3000
                G91
                G1 E-50  F1000
                G1 X0.1  F3000
                G1 E-50  F1000
                G1 X-0.1 F3000
                G1 E-50  F1000
                G1 X0.1  F3000
                G1 E-50  F1000
                G1 X-0.1 F3000
                G1 E-50  F1000
                G1 X0.1  F3000
                G1 E-50  F1000
                G1 X-0.1 F3000
                RESTORE_GCODE_STATE NAME=M600_state
              '';
          };

          "gcode_macro CANCEL_PRINT" = {
            rename_existing = "BASE_CANCEL_PRINT";
            gcode =
              indentGcode
              ''
                TURN_OFF_HEATERS
                CLEAR_PAUSE
                SDCARD_RESET_FILE
                BASE_CANCEL_PRINT
              '';
          };

          "gcode_macro PARK_WAIT" = {
            gcode =
              indentGcode
              ''
                {% set x = params.X|default(0)|float %}
                {% set y = params.Y|default(230)|float %}
                {% set z = params.Z|default(10)|float %}
                {% set e = params.Z|default(20)|float %}
                {% set millis = params.MILLIS|default(5)|float %}

                SAVE_GCODE_STATE NAME=PAUSE_state
                G91
                G1 E-{e} F2100
                G1 Z{z}
                G90
                G1 X{x} Y{y} F6000

                G4 P{millis}

                G91
                G1 E{e} F2100
                G90
                RESTORE_GCODE_STATE NAME=PAUSE_state MOVE=1
              '';
          };

          "gcode_macro PAUSE" = {
            rename_existing = "BASE_PAUSE";
            gcode =
              indentGcode
              ''
                {% set x = params.X|default(0)|float %}
                {% set y = params.Y|default(230)|float %}
                {% set z = params.Z|default(10)|float %}
                {% set e = params.E|default(20)|float %}

                SAVE_GCODE_STATE NAME=PAUSE_state
                BASE_PAUSE
                G91
                G1 E-{e} F2100
                G1 Z{z}
                G90
                G1 X{x} Y{y} F6000
              '';
          };

          "gcode_macro RESUME" = {
            rename_existing = "BASE_RESUME";
            gcode =
              indentGcode
              ''
                {% set e = params.Z|default(20)|float %}

                G91
                G1 E{e} F2100
                G90
                RESTORE_GCODE_STATE NAME=PAUSE_state MOVE=1
                BASE_RESUME
              '';
          };

          "gcode_macro PRIME_LINE" = {
            gcode =
              indentGcode
              ''
                G92 E0 # Reset Extruder
                G1 Z2.0 F3000 # Move Z Axis up little to prevent scratching of Heat Bed
                G1 X1 Y20 Z0.3 F5000.0 # Move to start position
                G1 X1 Y200.0 Z0.3 F1500.0 E15 # Draw the first line
                G1 X1.3 Y200.0 Z0.3 F5000.0 # Move to side a little
                G1 X1.3 Y20 Z0.3 F1500.0 E30 # Draw the second line
                G92 E0 # Reset Extruder
                G1 Z2.0 F3000 # Move Z Axis up little to prevent scratching of Heat Bed
                G1 X5 Y20 Z0.3 F5000.0 # Move over to prevent blob squish
              '';
          };

          "gcode_macro START_PRINT" = {
            gcode =
              indentGcode
              ''
                {% set fbt = params.FBT|float %}
                {% set tnt = params.TNT|float %}
                {% set fnt = params.FNT|float %}
                {% set z = params.Z|default(0)|float %}
                {% set pa = params.PA|default(0)|float %}

                G90 # use absolute coordinates
                M83 # extruder relative mode
                M140 {fbt} # set final bed temp
                M104 S{tnt} # set temporary nozzle temp to prevent oozing during homing and auto bed leveling
                G4 S10 # allow partial nozzle warmup
                G28 # home all axis
                G1 Z50 F240
                G1 X2 Y10 F3000
                M104 S{fnt} # set final nozzle temp
                M190 S{fbt} # wait for bed temp to stabilize
                M109 S{fnt} # wait for nozzle temp to stabilize

                # Reset the G-Code Z offset (adjust Z offset if needed)
                SET_GCODE_OFFSET Z={z}
                SET_PRESSURE_ADVANCE EXTRUDER=extruder ADVANCE={pa}

                G0 Z0
                PRIME_LINE
              '';
          };

          "gcode_macro END_PRINT" = {
            gcode =
              indentGcode
              ''
                G91 # Relative positioning
                G1 E-2 F2700 # Retract a bit
                G1 E-2 Z0.2 F2400 # Retract and raise Z
                G1 X5 Y5 F3000 # Wipe out
                G1 Z10 #Raise Z more
                G90 # Absolute positionning

                G1 X0 Y200 # Present print
                M106 S0 # Turn-off fan
                M104 S0 # Turn-off hotend
                M140 S0 # Turn-off bed

                M84 X Y E # Disable all steppers but Z
              '';
          };
        };
      };

      services.moonraker = {
        enable = true;

        group = "klipper";

        settings = {
          authorization.trusted_clients = [
            "127.0.0.1"
            (secret.network.ips.heater or "")
            (secret.network.ips.edge.vpn or "")
            (secret.network.ips.omen.vpn or "")
          ];

          octoprint_compat = {};
          history = {};
        };
      };

      services.nginx = {
        enable = true;

        recommendedGzipSettings = true;
        recommendedProxySettings = true;
        recommendedOptimisation = true;

        upstreams."apiserver" = {
          servers."127.0.0.1:7125" = {};
          extraConfig = ''
            ip_hash;
          '';
        };

        virtualHosts.${secret.network.ips.blowhole.dns or ""} = {
          root = pkgs.mainsail + "/share/mainsail";

          locations."/".extraConfig = ''
            try_files $uri $uri/ /index.html;
          '';

          locations."/index.html".extraConfig = ''
            add_header Cache-Control "no-store, no-cache, must-revalidate";
          '';

          locations."/websocket".extraConfig = ''
            proxy_pass http://apiserver/websocket;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_read_timeout 86400;
          '';

          locations."~ ^/(printer|api|access|machine|server)/".extraConfig = ''
            proxy_pass http://apiserver$request_uri;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Scheme $scheme;
          '';

          extraConfig = ''
            client_max_body_size 512M;
          '';
        };
      };
    };
  };
}