{ config, ... }:
{
  services.immich = {
    enable = true;
    secretsFile = "/var/secrets/immich";
    port = config.svports.immich;
    settings = {
      server = {
        externalDomain = "https://immich.vt3e.cat";
      };
    };
  };

  services.caddy.virtualHosts."immich.vt3e.cat" = {
    extraConfig = ''
      encode zstd gzip
      reverse_proxy localhost:8081
    '';
  };
}