{ config, ... }:

let
  port = 33001;
  addr = "0.0.0.0:${toString port}";
in
{
  services.miniflux = {
    enable = true;
    adminCredentialsFile = config.age.secrets.miniflux-admin-credentials.path;
    config = {
      LISTEN_ADDR = addr;
    };
  };

  age.secrets.miniflux-admin-credentials.file = ../../../../secrets/miniflux-admin-credentials.age;

  networking.firewall.allowedTCPPorts = [ port ];
}