{
  lib,
  config,
  pkgs,
  ...
}:
with lib; let
  cfg = config.niveum.telegramBots;

  botService = name: bot:
    nameValuePair "telegram-bot-${name}" {
      enable = bot.enable;
      startAt = bot.time;
      serviceConfig = {
        Type = "oneshot";
        LoadCredential = "token:${bot.tokenFile}";
      };
      wants = ["network-online.target"];
      script = ''
        export TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")"
        QUOTE=$(${bot.command})
        if [ -n "$QUOTE" ]; then
          echo $QUOTE >&2
          ${strings.concatStringsSep "\n" (map (chatId: ''
            ${pkgs.curl}/bin/curl -X POST "https://api.telegram.org/bot''${TOKEN}/sendMessage" \
              -d chat_id="${chatId}" \
              -d text="$QUOTE" ${
              lib.strings.optionalString (bot.parseMode != null)
              "-d parse_mode=${bot.parseMode}"
            } | ${pkgs.jq}/bin/jq -e .ok
          '')
          bot.chatIds)}
        fi
      '';
    };
in {
  options.niveum.telegramBots = mkOption {
    type = types.attrsOf (types.submodule {
      options = {
        enable = mkEnableOption "Telegram bot";
        time = mkOption {type = types.str;};
        tokenFile = mkOption {type = types.path;};
        chatIds = mkOption {
          type = types.listOf (types.strMatching "-?[0-9]+|@[A-Za-z0-9]+");
        };
        command = mkOption {type = types.str;};
        parseMode = mkOption {
          type = types.nullOr (types.enum ["HTML" "Markdown"]);
          default = null;
        };
      };
    });
    default = {};
  };

  config = {systemd.services = attrsets.mapAttrs' botService cfg;};
}