{ config, pkgs, lib, ... }:

{

  services.tt-rss = {
    enable = true;                                           # Enable TT-RSS
    database = {                                             # Configure the database
      type = "pgsql";                                        # Database type
      passwordFile = "/etc/tt-rss-pass";                     # Where to find the password
    };
    email = {
      fromAddress = "feeds@hermitcollective.net"; # Address for outgoing email
      fromName = "Feeds from HermitCollective";   # Display name for outgoing email
    };
    selfUrlPath = "https://feeds.hermitcollective.net/"; # Root web URL
    virtualHost = "feeds.hermitcollective.net";          # Setup a virtualhost
  };

  services.postgresql = {
    enable = true;                            # Ensure postgresql is enabled
    authentication = ''
      local tt_rss all ident map=tt_rss-users
    '';
    identMap =                                # Map the tt-rss user to postgresql
      ''
        tt_rss-users tt_rss tt_rss
      '';
  };

  services.nginx.virtualHosts."feeds.hermitcollective.net" = {                              # TT-RSS hostname
      enableACME = true;                                                       # Use ACME certs
      forceSSL = true;                                                         # Force SSL
  };
}