{ config, ... }:
let
  bindIP = "127.0.1.2";
  port = 5051;
  cfg = config.services.wiki-js;
in {
  # sops.secrets."wikijs/envfile" = {
  #   restartUnits = [ "wiki-js.service" ];
  # };

  services.wiki-js = {
    enable = true;
    # environmentFile = config.sops.secrets."wikijs/envfile".path;
    settings = {
      inherit bindIP port;
      db = {
        type = "postgres";
        host = "/run/postgresql";
        db = "wiki-js";
        user = "wiki-js";
      };
    };
  };

  services.postgresql = {
    ensureDatabases = [ "wiki-js" ];
    ensureUsers = [{
      name = "wiki-js";
      ensureDBOwnership = true;
    }];
  };

  services.nginx.virtualHosts."wiki.wackattack.eu" = {
    locations."/" = {
      proxyPass = "http://${bindIP}:${toString port}";
    };
  };
}