{
  inputs,
  config,
  pkgs,
  lib,
  ...
}: let
  cfg = config.services.freshrss;
in {
  services.freshrss = {
    enable = true;
    database.type = "sqlite";
    webserver = "nginx";
    baseUrl = "https://rss.venberg.xyz";
    virtualHost = "rss.venberg.xyz";
    passwordFile = config.sops.secrets.freshrss-password.path;
    defaultUser = "gabe";
  };

  services.nginx.virtualHosts.${cfg.virtualHost} = {
    enableACME = true;
    forceSSL = true;
  };
  # host.restic.backups.freshrss = {
  #   paths = [
  #   TODO
  #   ];
  #   preBackupCommands = "TODO";
  #   postBackupCommands = "TODO";
  # };

  imports = [./nginx.nix];
}