{
  self,
  config,
  pkgs,
  ...
}: let
  domain = "yt.gssws.de";
in {
  age.secrets.invidious_db_password.file = "${self}/secrets/chonk_invidious_db_password.age";

  services.invidious = {
    inherit domain;
    enable = true;
    nginx.enable = true;
    database = {
      createLocally = true;
      passwordFile = "/run/agenix/invidious_db_password";
    };
    settings = {
      https_only = true;
    };
  };
}