{ lib, config, ... }: {
  options.my.servers.firefly-iii.enable = lib.mkEnableOption "enable";
  config = lib.mkIf (config.my.servers.firefly-iii.enable
    && config.my.servers.postgres.enable) {
      sops.secrets.firefly-iii-keyfile = {
        owner = config.users.users.firefly-iii.name;
        inherit (config.users.users.firefly-iii) group;
      };
      services.firefly-iii = {
        enable = true;
        virtualHost = "money.servidos.lat";
        enableNginx = true;
        settings = {
          APP_KEY_FILE = config.sops.secrets.firefly-iii-keyfile.path;
          DB_HOST = config.my.postgresSocket;
          DB_CONNECTION = "pgsql";
        };
      };
    };
}