{ lib, config, proxyReverse, ... }: {
  options.my.servers.kavita.enable = lib.mkEnableOption "enable";
  config = lib.mkIf config.my.servers.kavita.enable {
    sops.secrets.kavita-token = { };
    users.users.kavita = {
      isSystemUser = true;
      group = "kavita";
      extraGroups = [ "piracy" ];
    };
    services = {
      kavita = {
        enable = true;
        tokenKeyFile = config.sops.secrets.kavita-token.path;
      };
      nginx = {
        enable = true;
        virtualHosts."library.${config.my.domain}" =
          proxyReverse config.services.kavita.port // { };
      };
    };
  };
}