{ config, pkgs, ... }:

let
  port = 33001;
  addr = "127.0.0.1:${toString port}";

in
{
  age.secrets.miniflux-admin-credentials.file = ./miniflux-admin-credentials.age;

  services.miniflux = {
    enable = true;
    package = pkgs.unstable.miniflux;
    adminCredentialsFile = config.age.secrets.miniflux-admin-credentials.path;
    config.LISTEN_ADDR = addr;
  };

  services.nginx.virtualHosts."miniflux.pleshevski.ru" = {
    enableACME = true;
    forceSSL = true;
    locations."/".proxyPass = "http://${addr}";
  };
}