{
  lib,
  config,
  inputs,
  ...
}:
let
  cfg = config.my.servers.firefox-syncserver;
in
{
  options.my.servers.firefox-syncserver =
    inputs.self.lib.mkServerOptions "firefox-syncserver" "sync" 4233
      lib;
  config = lib.mkIf (cfg.enable && config.my.secureHost) {
    # sops.secrets.firefox-syncserver.sopsFile = ../../secrets/env.yaml;
    services.firefox-syncserver = {
      inherit (cfg) enable;
      # secrets = config.sops.secrets.firefox-syncserver;
      settings.port = cfg.port;
      singleNode = {
        enable = true;
        enableTLS = true;
        enableNginx = true;
        hostname = config.networking.hostName;
        # url = cfg.host;
      };
    };
  };
}