{
    config,
    ...
}: {
    services.owncast = {
        enable = true;
        port = 9842;
    };

    services.caddy = {
        enable = true;
        virtualHosts."live.jacekpoz.pl".extraConfig = ''
            encode gzip
            reverse_proxy 127.0.0.1:9842
        '';
    };

    networking.firewall.allowedTCPPorts = [ 80 443 ] 
        ++ [ config.services.owncast.rtmp-port ];
}