{ config, pkgs, lib, ... }:

{
  services.ollama = {
    enable = true;
    host = "0.0.0.0";
    port = 11434;
  };
  
  # Open firewall port for Ollama
  networking.firewall.allowedTCPPorts = [ 11434 ];
  
  # Install ollama-rocm package
  environment.systemPackages = with pkgs; [
    ollama-rocm
  ];
  
  # Add CA certificate for Ollama
  security.pki.certificateFiles = [
    /home/brimlock/ollama-ca.crt
  ];
}