{
  config,
  pkgs,
  ...
}:
{
  programs.rclone = {
    enable = true;

    # Give rclone access to the ssh agent
    package = pkgs.writeShellScriptBin "rclone" ''
      export GNUPGHOME="${config.xdg.dataHome}/gnupg"
      export SSH_AUTH_SOCK=$(${pkgs.gnupg}/bin/gpgconf --list-dirs agent-ssh-socket)
      exec ${pkgs.rclone}/bin/rclone "$@"
    '';

    remotes = {
      # gdrive = {
      #   config = {
      #     type = "drive";
      #     scope = "drive";
      #
      #     root_folder_id = "";
      #   };
      #
      #   secrets = {
      #     token = "${config.xdg.configHome}/rclone/gdrive_token";
      #
      #     client_id = "${config.xdg.configHome}/rclone/gdrive_client_id";
      #     client_secret = "${config.xdg.configHome}/rclone/gdrive_client_secret"; # TODO: sops?
      #   };
      #
      #   mounts = {
      #     "/" = {
      #       enable = true;
      #       mountPoint = "${config.home.homeDirectory}/gdrive";
      #
      #       options = {
      #         dir-cache-time = "5m";
      #         poll-interval = "10s";
      #       };
      #     };
      #   };
      # };

      orion = {
        config = {
          type = "sftp";
          user = config.var.username;
        };

        secrets = {
          host = config.sops.secrets.orion_ip.path;
        };

        mounts = {
          "/var/lib/filebrowser/files" = {
            enable = true;

            mountPoint = "${config.home.homeDirectory}/orion";

            options = {
              dir-cache-time = "5m";
              poll-interval = "10s";
              # Network optimizations
              "buffer-size" = "32M";
              "vfs-read-chunk-size" = "32M";
            };
          };
        };
      };
    };
  };
}