{pkgs, ...}:
with import <stockholm/lib>;
let
  secret = (import <secrets/elchos-token.nix>);
in {
  systemd.services.elchos-irctoken2 = {
    startAt = "*:0/5";
    serviceConfig = {
      RuntimeMaxSec = "20";
    };
    script = ''
      set -euf
      now=$(date -u +%Y-%m-%dT%H:%M)
      sleep 5
      sec=$(cat /tmp/irc-secret)
      message="The current secret is $sec"
      echo "$message"
      LOGNAME=sec-announcer
      HOSTNAME=$(${pkgs.systemd}/bin/hostnamectl --transient)
      IRC_SERVER=irc.freenode.net
      IRC_PORT=6667
      IRC_NICK=$HOSTNAME-$$
      IRC_CHANNEL='#eloop'

      export IRC_CHANNEL # for privmsg_cat

      echo2() { echo "$*"; echo "$*" >&2; }

      privmsg_cat() { ${pkgs.gawk}/bin/awk '{ print "PRIVMSG "ENVIRON["IRC_CHANNEL"]" :"$0 }'; }

      tmpdir="$(mktemp -d irc-announce_XXXXXXXX)"
      cd "$tmpdir"
      mkfifo ircin
      trap "
        rm ircin
        cd '$OLDPWD'
        rmdir '$tmpdir'
        trap - EXIT INT QUIT
      " EXIT INT QUIT

      {
        echo2 "USER $LOGNAME 0 * :$LOGNAME@$HOSTNAME"
        echo2 "NICK $IRC_NICK"

        # wait for MODE message
        ${pkgs.gnused}/bin/sed -un '/^:[^ ]* MODE /q'

        echo2 "JOIN $IRC_CHANNEL"

        printf '%s' "$message" \
          | privmsg_cat

        echo2 "PART $IRC_CHANNEL"

        # wait for PART confirmation
        sed -un '/:'"$IRC_NICK"'![^ ]* PART /q'

        echo2 'QUIT :Gone to have lunch'
      } < ircin \
        | ${pkgs.netcat}/bin/netcat "$IRC_SERVER" "$IRC_PORT" |tee -a ircin
    '';
  };
  systemd.services.elchos-create-token = {
    startAt = "*:0/30";
    serviceConfig = {
      RuntimeMaxSec = "20";
    };
    script = ''
      set -euf
      now=$(date -u +%Y-%m-%dT%H:%M)
      sec=$(echo -n "${secret}$now" | md5sum | cut -d\  -f1)
      message="The secret valid for 30 minutes is $sec"
      echo -n "$sec" > /tmp/irc-secret
      echo "token for $now (UTC) is $sec"
    '';
  };
}