{
    config,
    ...
}: {
    services.owncast = {
        enable = true;
        port = 9842;
    };

    services.caddy = {
        enable = true;
        virtualHosts."live.jacekpoz.pl".extraConfig = ''
            encode gzip
            reverse_proxy ${config.services.owncast.listen}:${toString config.services.owncast.port}
        '';
    };

    networking.firewall.allowedTCPPorts = [ 80 443 ]
        ++ [ config.services.owncast.rtmp-port ];
}