{
  config,
  lib,
  pkgs,
  ...
}:

let
  cfg = config.services.openarena-instance;

  openarenatbz2 = pkgs.fetchurl {
    url = "https://johannes.dynip.online/files/cwace-openarena-server.tbz2";
    sha256 = "f47c4cc5aaa7f59aa9d6ad4d76e9f4255cc8a88d9cfc2ba884bd8ab7ebf3ce00";
  };

in
{
  options.services.openarena-instance = {
    # ... existing options ...
  };

  config = {
    systemd.services."openarena@${cfg.name}" = {
      # ... existing service config ...

      preStart = ''
        mkdir -p /var/lib/openarena-${cfg.name}
        tar -xf ${openarenatbz2} -C /var/lib/openarena-${cfg.name} --strip-components=1
      '';
    };

    # ... existing firewall config ...
  };
}