_: {
    services.freshrss = {
        enable = true;
        baseUrl = "https://f.jacekpoz.pl:4834";
        database = {
            port = 7425;
            tableprefix = "freshrss";
            type = "pgsql";
        };
        defaultUser = "jacek";
        language = "pl";
        passwordFile = "/run/secrets/freshrss";
        virtualHost = null;
    };

    services.caddy = {
        enable = true;
        virtualHosts."f.jacekpoz.pl".extraConfig = ''
            reverse_proxy * localhost:4834
        '';
    };

    networking.firewall.allowedTCPPorts = [ 4834 ];
    networking.firewall.allowedUDPPorts = [ 4834 ];
}