args@{ my, ... }:
# Actual Budget in a NixOS guest, with durable state bind-mounted from the host.
my.guest {
  name = "actualbudget";
  interior = {
    users.users.actual = {
      isSystemUser = true;
      uid = 20001;
      group = "storage";
    };

    services.actual = {
      enable = true;
      openFirewall = true;
      user = "actual";
      group = "storage";
      settings = {
        port = 5006;
        dataDir = "/opt/actualbudget-data";
      };
    };
  };
} args