{
  config,
  pkgs,
  inputs,
  lib,
  ...
}: let
  domain = "news.cyplo.dev";
in {
  imports = [../nginx.nix];

  services.nginx.virtualHosts."${domain}" = {
    forceSSL = true;
    enableACME = true;
  };
  sops.secrets."freshrss-password" = {
    sopsFile = ./rss.sops.yaml;
    owner = "freshrss";
  };
  services.freshrss = {
    enable = true;
    virtualHost = domain;
    baseUrl = "https://${domain}";
    database.type = "sqlite";
    defaultUser = "cyryl";
    passwordFile = config.sops.secrets.freshrss-password.path;
  };
}