{config, ...}: {
  services.invidious = {
    enable = true;
    database = {
      createLocally = true;
    };
    domain = "invidious.vhack.eu";
    nginx.enable = true;
    extraSettingsFile = "${config.age.secrets.invidiousHmac.path}";
  };
}