{ config, ... }:
let
  PORT = config.svports.immich;
in
{
  services.immich = {
    enable = true;
    secretsFile = "/var/secrets/immich";
    port = PORT;
    settings = {
      server = {
        externalDomain = "https://immich.vt3e.cat";
      };
    };
  };

  services.caddy.virtualHosts."immich.vt3e.cat" = {
    extraConfig = ''
      encode zstd gzip
      reverse_proxy localhost:${toString PORT}
    '';
  };
}