{
    config,
    pkgs,
    ...
}: let 
    domain = "ffsync.jacekpoz.pl";
in {
    age.secrets.firefox-syncserver-secrets.file = ../../secrets/firefox-syncserver-secrets.age;

    services.firefox-syncserver = {
        enable = true;
        logLevel = "warn";
        singleNode = {
            enable = true;
            capacity = 100;
            hostname = domain;
            url = "https://${domain}";
        };
        settings = {
            port = 6583;
        };
        secrets = config.age.secrets.firefox-syncserver-secrets.path;
    };

    services.mysql.package = pkgs.mariadb;

    services.caddy = {
        enable = true;
        virtualHosts.${domain}.extraConfig = ''
            reverse_proxy * localhost:6583
        '';
    };
}