{
  lib,
  pkgs,
  ...
}:
{
  services.forgejo = {
    enable = true;
  };

  services.caddy = {
    enable = true;

    virtualHosts = {
      "forgejo.sysrq.ca" = {
        extraConfig = ''
          encode gzip

          # Automatically handle HTTPS via Let’s Encrypt
          # Caddy will request and renew certs for immich.sysrq.ca

          reverse_proxy http://192.168.0.60:3000 {
          }
        '';
      };
    };
  };

  networking.firewall.allowedTCPPorts = [ 3000 ];

}