{ ... }:
{
  services = {
    kavita = {
      enable = true;
      dataDir = "/var/lib/books";
      tokenKeyFile = "/run/agenix/kavita_token_key";
      port = 5000;
      ipAdresses = [
        "0.0.0.0"
        "::"
      ];
    };

    nginx.virtualHosts = {
      "books.bhankas.org" = {
        addSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = "http://127.0.0.1:5000";
          proxyWebsockets = false;
          extraConfig =
            "proxy_set_header Host $host;"
          ;
        };
      };
    };
  };

  security.acme.certs = {
    "books.bhankas.org" = {
      email = "admin@bhankas.org";
      dnsResolver = "1.1.1.1:53";
    };
  };
}