{
  config,
  inputs,
  pkgs,
  lib,
  ...
}:

{
  imports = [ inputs.nixpkgs-stable.nixosModules.freshrss ];

  services.freshrss = {
    enable = true;
    defaultUser = "admin";
    passwordFile = config.age.secrets.freshrss-adminpass.path;
    baseUrl = "https://rss.baduhai.dev";
    dataDir = "/data/freshrss";
    webserver = "nginx";
    virtualHost = "rss.baduhai.dev";
  };

  age.secrets.freshrss-adminpass = {
    file = "${inputs.self}/secrets/freshrss-adminpass.age";
    owner = "freshrss";
    group = "freshrss";
  };
}