{
  flake,
  config,
  pkgs,
  lib,
  ...
}:
let
  psCfg = config.pub-solar;
  xdg = config.home-manager.users."${psCfg.user.name}".xdg;
in
{
  security.acme.certs = {
    "actual.faenix.eu" = { };
  };

  services.nginx.virtualHosts = {
    "actual.faenix.eu" = {
      forceSSL = true;
      useACMEHost = "actual.faenix.eu";
      locations."/".proxyPass = "http://127.0.0.1:${builtins.toString config.services.actual.settings.port}";
    };
  };

  services.actual = {
    enable = true;
  };
}