{
  pkgs,
  lib,
  ...
}:
{
  systemd.services.llama-server = {
    description = "llama.cpp server (multi-model preset, ROCm)";
    after = [ "network-online.target" ];
    wants = [ "network-online.target" ];
    wantedBy = [ "multi-user.target" ];

    environment = {
      HOME = "%S/llama-server";
      HF_HOME = "%S/llama-server";
    };

    serviceConfig = {
      Type = "simple";
      DynamicUser = true;
      SupplementaryGroups = [
        "video"
        "render"
      ];
      StateDirectory = "llama-server";
      WorkingDirectory = "%S/llama-server";
      ExecStart = lib.concatStringsSep " " [
        "${pkgs.llama-cpp-rocm}/bin/llama-server"
        "--host 0.0.0.0"
        "--port 8000"
        "--models-preset ${./models.ini}"
        "--models-max 2"
      ];
      Restart = "on-failure";
      RestartSec = 10;

      PrivateTmp = true;
      ProtectSystem = "strict";
      ProtectHome = true;
      NoNewPrivileges = true;
    };
  };
}