{config, ...}: {
  services.miniflux = {
    enable = true;
    config = {
      LISTEN_ADDR = "127.0.0.1:5892";
    };
    adminCredentialsFile = config.age.secrets.minifluxAdmin.path;
  };

  services.nginx = {
    enable = true;
    virtualHosts."rss.vhack.eu" = {
      locations."/".proxyPass = "http://${config.services.miniflux.config.LISTEN_ADDR}";

      enableACME = true;
      forceSSL = true;
    };
  };
}