{ ... }:

{
  services.rsyslogd = {
    extraConfig = ''
      module(load="mmrm1stspace")
      module(load="imrelp")

      template(name="incomingFilename" type="list") {
          constant(value="/var/log/remote/")
          property(name="fromhost-ip")
          constant(value="/")
          property(name="timegenerated" dateFormat="year")
          constant(value="-")
          property(name="timegenerated" dateFormat="month")
          constant(value="-")
          property(name="timegenerated" dateFormat="day")
          constant(value=".log")
      }

      ruleset(name="handleIncomingLogs") {
          action(type="mmrm1stspace")
          action(
              type="omfile"
              dynaFile="incomingFilename"
              template="RSYSLOG_FileFormat"
          )
      }

      input(
          type="imrelp"
          port="20514"
          ruleset="handleIncomingLogs"
      )
    '';
  };

  networking.firewall.allowedTCPPorts = [ 20514 ];

  systemd.tmpfiles.rules = [
    "d /var/log/remote 0750 root root -"
  ];
}