niksos/hosts/chmura/services/firefox-syncserver.nix

{
    config,
    pkgs,
    ...
}: let
    domain = "ffsync.jacekpoz.pl";
in {
    age.secrets.firefox-syncserver-secrets.file = ../../../secrets/firefox-syncserver-secrets.age;

    services = {
        firefox-syncserver = {
            enable = true;
            logLevel = "warn";
            singleNode = {
                enable = true;
                capacity = 100;
                hostname = domain;
                url = "https://${domain}";
            };
            settings = {
                port = 6583;
            };
            secrets = config.age.secrets.firefox-syncserver-secrets.path;
        };

        mysql.package = pkgs.mariadb;

        caddy = {
            enable = true;
            virtualHosts.${domain}.extraConfig = ''
                reverse_proxy * localhost:6583
            '';
        };
    };
}