{ lib, config, ... }:
let
  cfg = config.my.servers.readeck;
  setup = import ./setup.nix { inherit lib config; };
in
{
  options.my.servers.readeck = setup.mkOptions "readeck" "laters" 9546;
  config = {
    sops.secrets.readeck.sopsFile = ../../secrets/env.yaml;
    services = {
      readeck = {
        inherit (cfg) enable;
        environmentFile = config.sops.secrets.readeck.path;
        settings = {
          main = {
            log_level = "warn";
            data_directory = "/var/lib/readeck";
          };
          server = {
            port = cfg.port;
            host = cfg.ip;
          };
        };
      };
      nginx.virtualHosts."${cfg.host}" = lib.mkIf cfg.enableProxy (setup.proxyReverse cfg);
    };
  };
}