{ config, ... }:
let
  domain = "links.kassouni.net";
in
{
  services.linkding = {
    enable = true;
    environmentFile = "/var/lib/linkding/creds.env";
    settings.LD_CSRF_TRUSTED_ORIGINS = "https://${domain}";
  };

  services.nginx.virtualHosts.${domain} = {
    forceSSL = true;
    enableACME = true;
    locations."/" = {
      proxyPass = "http://127.0.0.1:${toString config.services.linkding.port}";
    };
  };
}